Cyber Security Analyst

Cyber Security AnalystRole Description

We are seeking a proactive, analytical, and security-focused Cyber Security Analyst to protect the organization's digital assets, systems, and data by identifying, assessing, and mitigating cybersecurity risks. The successful candidate will be responsible for monitoring security events, investigating incidents, implementing security controls, conducting vulnerability assessments, and collaborating with cross-functional teams to strengthen the organization's overall security posture. This role plays a critical part in safeguarding business operations through effective threat detection, incident response, risk management, and continuous security improvement.

Key responsibilities include monitoring security information and event management (SIEM) platforms, security alerts, and network activity to identify potential threats and suspicious behavior; investigating and responding to cybersecurity incidents while performing root cause analysis and recommending corrective actions; conducting vulnerability assessments, security testing, and risk analyses across applications, systems, networks, and cloud environments; supporting penetration testing activities and validating remediation efforts; implementing and maintaining security controls, policies, standards, and best practices aligned with organizational and regulatory requirements; monitoring endpoint protection, identity and access management (IAM), firewalls, intrusion detection and prevention systems (IDS/IPS), and other security technologies; collaborating with IT, infrastructure, cloud, software development, and business teams to integrate security throughout the technology lifecycle; assisting with security audits, compliance assessments, and governance initiatives; maintaining incident response documentation, security reports, dashboards, and technical procedures; researching emerging cyber threats, attack techniques, vulnerabilities, and mitigation strategies; supporting security awareness initiatives and providing guidance on cybersecurity best practices; participating in disaster recovery, business continuity, and resilience planning; contributing to security automation and continuous improvement initiatives; and ensuring compliance with industry standards, regulatory frameworks, and internal security policies.

The Cyber Security Analyst is expected to combine strong technical expertise with analytical thinking to proactively identify risks and strengthen the organization's cybersecurity defenses. Success in this role requires excellent problem-solving skills, attention to detail, effective communication, and the ability to respond efficiently to evolving security threats in a fast-paced technology environment.

Qualifications

• Bachelor's degree in Cyber Security, Information Technology, Computer Science, Information Systems, Network Engineering, or a related discipline.
• Strong understanding of cybersecurity principles, risk management, and information security best practices.
• Knowledge of network security, operating systems, cloud security, application security, endpoint protection, and identity and access management (IAM).
• Familiarity with security technologies including SIEM, IDS/IPS, firewalls, endpoint detection and response (EDR), antivirus, web application firewalls (WAF), and vulnerability management tools.
• Understanding of security frameworks and standards such as NIST Cybersecurity Framework, ISO/IEC 27001, CIS Controls, OWASP Top 10, MITRE ATT&CK, PCI DSS, or similar industry standards.
• Knowledge of vulnerability assessment, penetration testing concepts, threat intelligence, digital forensics, and incident response methodologies.
• Proficiency in scripting or programming languages such as Python, PowerShell, Bash, or similar languages is advantageous.
• Familiarity with cloud platforms including AWS, Microsoft Azure, Google Cloud Platform (GCP), or hybrid cloud environments.
• Understanding of networking protocols, TCP/IP, DNS, VPNs, wireless security, and enterprise infrastructure.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written, verbal, and technical documentation skills.
• Ability to communicate security risks and recommendations effectively to both technical and non-technical stakeholders.
• High level of integrity, attention to detail, and commitment to maintaining confidentiality.
• Professional certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), GIAC certifications, Microsoft Security, AWS Security, or equivalent are considered advantageous but are not mandatory.
• Demonstrated commitment to continuous learning and staying current with evolving cyber threats, emerging security technologies, regulatory requirements, and industry best practices.