Security Operations Analyst

The Security Operations Team is responsible for safeguarding the security of Control Risks systems, infrastructure and providing internal advocacy for security practices. Opportunity to work closely with product and platform teams throughout the company to help ensure that Control Risks systems meet both safety and security compliance.

As a Security Analyst, you will be responsible for continuous threat detection, monitoring, and incident response across the organization's environment. This role plays a critical part in safeguarding systems, networks, and data from cyber threats and requires a combination of technical expertise, situational awareness, and analytical thinking.

Tasks and responsibilities

• Continuously detect, investigate, analyze, and respond to security incidents, providing root cause analysis and documenting findings for post-incident reviews.
• Collect, evaluate, and integrate threat intelligence—specifically related to Microsoft products and services—to strengthen detection and response capabilities.
• Identify and implement opportunities for automation and process improvement to reduce manual efforts and improve operational efficiency.
• Perform detailed analysis of security investigations and incidents to generate metrics and assess the effectiveness of operational workflows.
• Develop and enforce procedures for auditing and remediating non-compliance with established information security standards.
• Investigate, contain, and coordinate recovery from security incidents across both enterprise and cloud environments.
• Support the creation, enhancement, and continuous improvement of incident response playbooks and escalation procedures.
  

Requirements

• Bring 2-4 years of relevant experience in Security Operations, IT Security, or a related domain.
• Have practical knowledge of security technologies including network firewalls, proxy solutions, endpoint detection and response (EDR), security information and event management (SIEM), and email security systems.
• Demonstrate hands-on experience with security tools and platforms, preferably but not mandatorily including Microsoft Defender for Endpoint, Microsoft Sentinel, Microsoft Defender for Identity, and Azure Security Center.
• Be familiar with key cybersecurity frameworks and standards such as ISO 27001, Cyber Essentials, and NIST.
• Have working knowledge of both Windows and Linux environments, along with exposure to open-source intelligence (OSINT) tools and techniques.
• Exhibit strong analytical thinking and problem-solving abilities, complemented by excellent technical documentation skills.
• Communicate effectively and confidently, with the ability to explain complex security issues to both technical and non-technical audiences.