About This Role
This Cybersecurity Analyst role involves monitoring, investigating, and responding to security alerts and incidents across various platforms. The position suits a detail-oriented and proactive individual with strong analytical and communication skills who can work effectively in a Security Operations Center (SOC) environment.
Responsibilities
- Monitor and investigate security alerts and events from various security platforms
- Perform initial investigation and analysis of potential security incidents
- Analyze logs, alerts, IP addresses, domains, URLs, processes, and other Indicators of Compromise (IOCs)
- Investigate suspicious user activities, endpoint behavior, network traffic, and email threats
- Perform basic threat hunting and security event correlation
- Assist with incident response, containment, and remediation activities
- Validate vulnerabilities and assist with vulnerability remediation and patch management
- Document investigation findings, actions taken, and recommendations
- Create and maintain incident reports and security documentation
- Escalate confirmed or high-risk security incidents to the appropriate team
Requirements
- Good written and verbal communication skills
- Able to communicate technical security findings clearly to both technical and non-technical users
- Comfortable communicating through email, chat, and incident/ticketing platforms
- Able to properly document investigation findings and provide clear recommendations
- Strong investigation and analytical skills
- Ability to analyze security alerts and determine whether activity is benign, suspicious, or malicious
- Ability to correlate information from multiple security tools and log sources
- Strong attention to detail and ability to identify unusual patterns or behavior
- Ability to troubleshoot and investigate security-related issues independently
- Willingness to learn and continuously improve cybersecurity knowledge
- Analytical – able to investigate security events and connect information from different sources
- Detail-oriented – understands that small details can be critical during security investigations
- Proactive – willing to investigate beyond the initial alert and identify potential threats
- Communicative – able to clearly explain findings and provide timely updates
- Responsible – understands the importance of security operations and proper incident handling
- Adaptable – willing to work on either day or night shifts depending on operational requirements
- Curious and willing to learn – continuously develops technical and cybersecurity knowledge