Security Analyst

Job Description Job Title: Security Analyst Line of Business: Services Work Arrangement: Hybrid (Onsite & Remote) | Requires travel flexibility Role Purpose The Security Analyst administers cloud security policies, enforces preventive and recovery strategies, and conducts vulnerability and risk assessments for Managed Services customers to minimize internal and external security threats. Key Responsibilities Risk & Vulnerability Management: Conduct risk, gap, and vulnerability assessments across customer environments, cloud platforms, and IT infrastructure using standard security tools and frameworks. Security Operations & Incident Response: Respond to security incidents across all project lifecycles, participate in incident response workflows, and implement authorized security enhancements through a strict change management process. Client Advisory & Auditing: Perform security audits of customer systems, deliver clear reports detailing identified risks and recommended remediations, and lead client discussions regarding findings. Governance & Project Guidance: Proactively advise internal project teams and client stakeholders on physical/technical controls, security guidelines, and compliance standards. Reporting & Continuous Improvement: Generate operational security metrics for management and continuously refine information security practices across As-A-Service offerings. Requirements & Experience Experience: 1–3+ years of dedicated experience in an IT security role within a enterprise or Managed Services (MSP) environment. Technical Knowledge: Hands-on understanding of Windows and Linux/UNIX operating systems, secure network architectures, identity and access management (IAM), and firewall/IDS/IPS protocols. Education: Tertiary qualifications in Information Systems, Computer Science, or equivalent practical IT experience. Core Competencies: Exceptional written and verbal communication, strong technical documentation skills, proven negotiation abilities, and the capacity to remain calm under high-pressure security incidents. Operational Style: Self-starter capable of operating with minimal supervision while maintaining a proactive advisory mindset. Preferred Certifications & Frameworks Industry Certifications: CISSP, CISA, CISM, OSCP, CEH, or GIAC. Vendor Certifications: Fortinet NSE 4+, Palo Alto PCNSA/PCNSE, Check Point CCSA, or Cisco CCNA/CCNP Security. Framework Familiarity: ISO 27001/2, ISO 31000, NIST, COBIT, or ITIL v3.