Overview

The Cybersecurity Analyst serves as a front-line defender responsible for protecting the organization’s data, systems, and network infrastructure from cyber threats. This role blends proactive threat hunting, continuous monitoring, enterprise security engineering, and incident response. The analyst identifies vulnerabilities, evaluates risks, and implements enterprise-grade security controls in alignment with organizational policies and regulatory requirements.

This position works closely with IT leadership to implement and manage security programs, assess third-party risks, and support broader digital transformation initiatives.

Responsibilities

Threat Monitoring & Detection

· Continuously monitor enterprise networks, SIEM dashboards, and security alerts for indicators of compromise or anomaly patterns.

· Review device, application, and infrastructure logs to identify suspicious behavior.

· Prioritize and escalate security issues based on impact and urgency.

Incident Response & Investigation

· Serve as first responder to security events—contain, mitigate, and document incidents.

· Perform forensic investigations to determine root cause, attack vector, and affected systems.

· Collaborate with IT and leadership to implement post-incident remediation.

Vulnerability & Risk Management

· Conduct vulnerability scanning, static/dynamic analysis, and penetration testing using enterprise tools.

· Perform regular risk assessments to identify and rank exposure across applications, cloud systems, and infrastructure.

· Coordinate with system owners to ensure vulnerabilities are remediated.

Security Engineering & Tooling

· Support administration of security tools such as SIEM, EDR, IPS/IDS, vulnerability scanners, and data security platforms.

· Work with cross-functional teams to interpret scan results and implement appropriate security controls.

· Assist in designing and strengthening enterprise security architecture.

Policy, Compliance & Governance

· Contribute to development, documentation, and enforcement of security policies and procedures.

· Ensure alignment with frameworks such as NIST, ISO 27001, CIS Controls, and regulatory obligations.

· Participate in security control assessments, audits, and compliance reporting.

Security Awareness & Education

· Deliver training that promotes secure behavior and reduces organizational risk.

· Provide technical guidance to teams regarding best practices for secure development and data handling.

Cross-Domain Collaboration

· Engage with cloud, networking, and application teams to ensure security is embedded across operations.

· Support digital modernization initiatives, including cloud migration and security automation

Required Skills & Qualifications:

Technical Skills

· Hands-on experience with enterprise security tools (SIEM, EDR, firewalls, vulnerability scanners). 94% of cybersecurity roles now require tool proficiency.

· Knowledge of malware analysis, threat modeling, identity and access management, encryption, and logging standards.

· Familiarity with cloud security (Azure, AWS, or GCP) and modern attack frameworks (MITRE ATT&CK).

· Proficiency in network security concepts and protocols.

Soft Skills

· Strong analytical thinking and problem solving—now considered core hiring requirements.

· Excellent communication skills to articulate risks and recommendations to both technical and non-technical audiences

Qualifications

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent work experience.

1+ year of experience in IT, help desk, or cybersecurity. Internships and hands-on lab experience will be considered.

Preferred certifications: Security+, CySA+, CEH, SSCP, or Microsoft Cybersecurity Analyst credentials (or willingness to obtain).
Preferred Qualifications:
Experience with application security, vulnerability management programs, or governance/risk/compliance (GRC) processes.
Experience analyzing data transfer security and third‑party application risk.
Knowledge of incident response frameworks and digital forensics methodologies.
Physical & Work Environment Requirements:
Ability to participate in on‑call rotation or after‑hours incident handling as required.
Hybrid or remote work flexibility depending on organizational policy.

Similar jobs