About This Role
This cybersecurity analyst role involves safeguarding the organization's digital assets, ensuring the integrity, confidentiality, and availability of critical information systems. The role drives proactive security measures, incident response, and compliance with industry standards, and suits motivated professionals eager to make a tangible impact in the rapidly evolving landscape of cybersecurity.
Responsibilities
- Monitor and analyze security events using Security Information and Event Management (SIEM) tools to detect potential threats and vulnerabilities
- Conduct vulnerability assessments and security risk investigations across diverse IT infrastructure components, including network devices, servers, and endpoints
- Implement and manage cybersecurity controls such as firewalls (Cisco ASA), intrusion detection systems (IDS), Endpoint Detection and Response (EDR), and network protocols to protect organizational assets
- Perform security system administration tasks, including system hardening, configuration management with GPO (Group Policy Objects), and system security planning aligned with ISO 27001 and ISO 27002 standards
- Lead incident response efforts by investigating security breaches, coordinating recovery procedures, and documenting findings in compliance with risk management frameworks like NIST or RMF
- Support network engineering activities involving routing protocols (OSPF, BGP), VPNs (IPsec), LAN/WAN configurations, load balancing, and cloud security architecture on platforms such as AWS or Google Cloud Platform
- Assist in maintaining information security compliance through regular vulnerability management, security assessments, and adherence to policies such as PCI DSS or FedRAMP
Requirements
- Proven experience in cybersecurity analysis or a related IT security role within complex network environments
- Strong understanding of computer networking concepts including TCP/IP, DNS, DHCP, VLANs, and network support practices
- Hands-on knowledge of cybersecurity tools such as SIEM platforms (Splunk, SolarWinds), Nmap, Burp Suite, Fiddler, and FIPS-compliant encryption methods
- Familiarity with operating systems like Windows, Linux (Ubuntu, CentOS), macOS, and BSD variants such as Solaris or openSUSE
- Experience implementing security frameworks based on NIST standards or ISO 27000 series
- Ability to perform vulnerability research, threat detection & response activities, system hardening techniques, and incident management procedures effectively
- Strong scripting skills in Python or Bash for automation tasks
Nice to have:
- Knowledge of cloud infrastructure security best practices
- Understanding of DevOps practices including CI/CD pipelines
