Security Analyst/Engineer

Role Overview: As a Security Analyst/Engineer, you will support the security operations of the organization by assisting in monitoring, detecting, and responding to security incidents. This role involves a mix of security analysis and engineering tasks, allowing you to progress from foundational knowledge to more advanced responsibilities and significantly contribute to the organization's cybersecurity efforts. Key Responsibilities: - Security monitoring and analysis: - Assist in monitoring security events and alerts from various sources like SIEM, IDS/IPS, antivirus systems, and endpoint detection platforms. - Conduct initial analysis of security events to determine their nature and potential impact on the organization. - Collaborate with senior analysts to investigate and respond to security incidents, including malware infections, phishing attempts, and unauthorized access attempts. - Incident response: - Contribute to incident response activities by providing technical assistance during security incidents, including containment, eradication, and recovery efforts. - Document incident response procedures, develop post-incident reports, and conduct lessons learned sessions to enhance incident handling capabilities. - Implement proactive measures to improve incident detection and response capabilities, such as developing playbooks for common attack scenarios. - Vulnerability management: - Support the vulnerability management process by assisting in vulnerability scanning, assessment, and remediation efforts. - Help prioritize and track the resolution of identified vulnerabilities in systems and applications. - Collaborate with system owners and IT teams to ensure timely patching and mitigation of identified vulnerabilities, leveraging automation and orchestration where possible. - Conduct security assessments and penetration tests to identify weaknesses in systems, applications, and network infrastructure. - Security tool: - Assist in the administration and configuration of security tools and technologies like firewalls, intrusion detection/prevention systems, and endpoint security solutions. - Participate in evaluating and testing new security technologies to enhance the organization's security posture. - Optimize the configuration and tuning of security tools and technologies to improve detection accuracy, reduce false positives, and enhance overall effectiveness. - Evaluate emerging security technologies and solutions, recommending and implementing enhancements to the security toolset based on industry best practices and organizational requirements. - Security awareness and training: - Support security awareness and training initiatives by assisting in the development of educational materials and delivering security awareness briefings to staff. Qualifications and Skills: - Bachelor's degree in computer science, Information Security, or related field. - 3-5 years of experience in a cybersecurity role with progressively increasing responsibilities. - Strong understanding of cybersecurity principles, threat landscape, and attack methodologies. - Proficiency in security tools and technologies such as SIEM, EDR, IDS/IPS, firewalls, and vulnerability scanners. - Excellent analytical, problem-solving, and decision-making skills. - Effective communication and stakeholder management abilities. - Certifications such as CompTIA Security+, CEH (Certified Ethical Hacker), or equivalent are a plus. (Note: The additional details of the company have been omitted from the Job Description.),