Cyber Security Analyst

About This Role

This role will assist in identifying, assessing, and mitigating cybersecurity vulnerabilities and threats to the organization. This individual will support the technical direction of security, participate in complex technical projects, and partner with other groups to deliver security tools and services.

Responsibilities

• Gather and analyze threat intelligence from various sources
• Correlate data from SIEMs, EDRs, and network telemetry to validate findings and escalate confirmed incidents to incident response teams
• Assist in the development and support incident response plans to address security incidents effectively
• Conduct regular threat assessments and testing, including penetration testing/red teaming
• Perform in-depth analysis of publicly disclosed vulnerabilities and assess organizational exposure
• Proactively identify potential threats by developing and executing threat-hunting campaigns across networks, endpoints and cloud environments
• Refine and create new alerting logic, detection signatures, and playbooks based on hunting outcomes
• Assist in conducting regular and ad-hoc vulnerability scans and assessments using a variety of tools (SAST, DAST, IAST, etc.) and techniques
• Collaborate with IT, Engineering and business units to ensure timely remediation in accordance to SLAs
• Communicate security risks and recommendations to management and stakeholders

Requirements

• 1-3 years experience in cybersecurity, with a focus on vulnerability and threat management
• Expertise in security principles, vulnerabilities, threats, container security and cloud security (AWS, GCP, Azure)
• Knowledge of vulnerability and threat management: assessment, threat modelling (STRIDE / MAESTRO methods preferred), penetration testing, intelligence gathering and analysis
• Proficiency in OS Security and Compliance: Linux, Windows, Mac, G-Suite, GWS Administration, SOC 2, NIST CSF, SOX, PCI-DSS
• Technical skills: Scripting (Python, Powershell, Bash), incident investigation and response

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field or equivalent experience
• Minimum of 1-3 years of experience in cybersecurity, with a focus on vulnerability and threat management

Nice to Have

• Relevant certifications such as CEH, OSCP, Security+, or GIAC certifications

Skills

* Required skills