Cyber Security Analyst

Responsibilities

• Monitor security alerts, logs, and events using SIEM tools (Splunk, QRadar, Sentinel, etc.)
• Investigate and respond to security incidents; perform root-cause and impact analysis
• Conduct vulnerability assessments and coordinate remediation with relevant teams
• Support penetration testing efforts and review findings
• Maintain and tune security tools (firewalls, IDS/IPS, endpoint detection and response)
• Assist with identity and access management (IAM) reviews and least-privilege audits
• Help maintain compliance with frameworks such as SOC 2, ISO 27001, NIST, GDPR, or HIPAA as applicable
• Document security policies, incident reports, and standard operating procedures
• Perform phishing/social engineering awareness testing and employee security training support
• Stay current on emerging threats, vulnerabilities, and attack techniques (CVEs, threat intel feeds)
• Support audits and risk assessments by gathering evidence and documentation

Required Skills

• 1–2 years of hands-on experience in cybersecurity, security operations, IT security, or a related role (internships/labs count toward this if substantial)
• Working knowledge of networking fundamentals (TCP/IP, DNS, firewalls, VPNs)
• Familiarity with SIEM platforms and log analysis
• Understanding of common attack vectors (phishing, malware, ransomware, social engineering)
• Basic scripting/automation skills (Python, PowerShell, or Bash) a plus
• Knowledge of security frameworks (NIST, ISO 27001, CIS Controls)
• Familiarity with vulnerability scanning tools (Nessus, Qualys, Rapid7)
• Understanding of endpoint security and EDR tools (CrowdStrike, SentinelOne, Defender)