Cyber Security Analyst

Cybersecurity Analyst

Key Responsibilities

Cloud Security & Web Applications (AWS Focus)

• Implement, manage, and continuously improve security controls across our AWS cloud infrastructure (e.g., IAM, Security Groups, GuardDuty, AWS WAF, CloudTrail).
• Perform regular vulnerability assessments and penetration testing on web applications and APIs.
• Integrate security into the CI/CD pipeline (DevSecOps) and utilize SAST/DAST tools to identify application vulnerabilities early in the software development lifecycle.
• Monitor cloud environments for misconfigurations and enforce Cloud Security Posture Management (CSPM).

Endpoint Security

• Deploy, administer, and monitor Endpoint Detection and Response (EDR) and Next-Generation Antivirus (NGAV) solutions.
• Investigate endpoint alerts, analyze malicious activity, and implement containment and remediation strategies.
• Ensure all corporate devices meet baseline security compliance and oversee patch management processes.

Security Operations (SecOps) & Incident Response

• Act as a primary responder for security incidents, executing incident response playbooks for cloud, web, and endpoint threats.
• Monitor SIEM dashboards, analyze logs from various sources (firewalls, AWS, endpoints), and perform active threat hunting to detect advanced persistent threats (APTs).
• Automate routine security tasks and responses using scripting (Python, Bash) or SOAR platforms.

Risk Management & Compliance

• Conduct comprehensive IT risk assessments, threat modeling, and vendor security risk evaluations.
• Help maintain and enforce enterprise security policies, standards, and procedures.
• Assist in continuous compliance monitoring for industry standards (such as SOC 2, ISO 27001, HIPAA, HITRUST among others) and support internal/external security audits.

Required Qualifications & Experience

• Experience:

  5 to 8 years of hands-on experience in a Cybersecurity, SecOps, or Cloud Security engineering role.

• Education:

  Bachelor's degree in computer science, Information Security, or a related technical field.

• Cloud Expertise:

  Proven, hands-on experience securing AWS hosting environments and managing AWS native security services.

• Technical Skills:

• Deep understanding of web application vulnerabilities (OWASP Top 10) and mitigation techniques.
• Hands-on experience with SIEM platforms and EDR tools (Microsoft Defender).
• Familiarity with network security architecture, TCP/IP, and routing protocols.

• Risk Frameworks:

  Practical knowledge of risk management frameworks (NIST, CIS Controls) and compliance mandates.

Desirable Certifications

(Holding one or more of the following is highly preferred)

• AWS Certified Security Specialty
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• CompTIA Cybersecurity Analyst (CySA+) or Certified Ethical Hacker (CEH)

What We Look For

• Problem Solver:

  You have an analytical mindset and love digging into logs to uncover the root cause of an issue.

• Self-Starter:

  You are proactive about identifying security gaps and don't wait to be told what to secure.

• Communicator:

  You can explain complex security risks to developers, IT engineers, and non-technical stakeholders alike