Cyber Security Analyst

Role & responsibilities

• Implement, manage, monitor, and upgrade security measures for data, systems, and networks.
• Ensure infrastructure protection through appropriate security controls.
• Monitor and respond to cyber threats (phishing, malware, ransomware, pharming).
• Manage identity and access controls; detect misuse of permissions.
• Investigate security alerts and provide incident response using best practices.
• Conduct periodic security audits to identify violations and inefficiencies.
• Generate incident reports for technical and non-technical stakeholders.
• Identify vulnerabilities and implement measures (firewalls, encryption).
• Test and evaluate security products; verify supplier compliance.
• Design or upgrade security systems; plan disaster recovery and contingency measures.
• Perform ethical hacking and simulate breaches for risk assessment.
• Research emerging threats and recommend preventive strategies.
• Troubleshoot security and network issues; respond to breaches promptly.
• Participate in change management and vulnerability testing.
• Maintain documentation of findings, actions, and lessons learned.

Required Technical Expertise

• Vulnerability Management Tools:

   Tenable/Nessus, Qualys, CrowdStrike, BurpSuite.

• XDR Platforms:

   Trend Micro, MS Defender.

• Cloud Security:

   Azure, Azure AD, Defender Suite.

• SIEM:

   Trend Micro, FortiGate, IBM QRadar, MS Sentinel.

• Web Filtering & NAC:

   Fortinet, Cisco ISE.

• WAF:

   Imperva, FortiWeb, F5.

• DMARC:

   RUA/RUF.

• Firewall Management:

   Configuration, auditing, segmentation, VPN, Azure Firewall.

• SIEM Operations:

   Rule configuration, API integration, log ingestion, threat investigation.

• Scripting & Tools:

   Python, Kali Linux, YARA.

• OS & Directory Services:

   AD, GPOs, Windows Servers, Desktop OS.
• Knowledge of ISO 27001, NIST, FISMA standards and IT security best practices.
• Advanced understanding of TCP/IP, OSI model, defense-in-depth.
• Hands-on experience with log analysis, network forensics, vulnerability scanning.
• Proficiency in security technologies (Anti-Virus, XDR, SIEM, NIPS, HIPS, WAF, ID/PS).
• Experience with SIEM platforms (Sentinel, QRadar, Splunk).
• Ability to develop and deploy signatures (YARA, Snort, Suricata)

Preferred candidate profile

• B.Tech IT / Bachelors degree in Computer Science or Information Systems.
• 5 - 7 years of relevant experience.
• Advanced certifications: CEH, CHFI, ECIH, CISM, CISSP, GIAC, CASP.
• ITIL Foundation or Intermediate; CAPM/PMP/Prince2 preferred