Information Security Analyst

As a Security Analyst, you will be responsible for monitoring security events and alerts using SIEM (Security Information and Event Management) tools, IDS/IPS (Intrusion Detection/Prevention System), and other security monitoring platforms. Your role will involve investigating and analyzing security incidents to identify the root cause, impact, and recommended remediation actions. Conducting in-depth analysis of security logs, network traffic, and other relevant data sources will be crucial in detecting and responding to potential threats. Real-time incident response activities, including containment, eradication, and recovery, following established procedures and guidelines will be part of your daily tasks. Collaboration with SOC analysts to provide guidance and support in investigating and escalating security incidents will also be essential. It is important to stay up-to-date with the latest security threats, vulnerabilities, and industry best practices to enhance incident detection and response capabilities. You will assist in the development and implementation of SOC processes and procedures, including incident response plans, playbooks, and escalation protocols. Providing timely and accurate reporting on security incidents, including trend analysis and pattern identification to support proactive security measures, will be a key responsibility. Monitoring and maintaining endpoint security solutions to detect and prevent malware threats and investigating and responding to malware incidents by providing detailed reports are also part of the role. Scheduling and managing phishing simulation campaigns to raise employee awareness, analyzing campaign results, identifying users at risk, and recommending targeted training programs will be crucial in improving security awareness within the organization. Coordinating Vulnerability Assessment and Penetration Testing (VAPT) with internal teams and external vendors, tracking vulnerabilities, ensuring timely remediation, and documenting progress are also part of the responsibilities. Conducting Proof of Concept (POC) evaluations for various security solutions to assess their effectiveness and suitability, documenting POC findings, and preparing recommendation reports for stakeholders will be required. Your contribution to designing and delivering cybersecurity awareness programs to educate employees on security best practices will play a significant role in enhancing the organization's overall security posture.,