Security Analyst

We are seeking a skilled and dedicated Security Analyst to join our growing team. The ideal candidate will be responsible for designing, implementing, and maintaining security measures to protect our organization's network, systems, and data. This role requires a proactive individual with a strong understanding of cybersecurity principles and best practices.
Key Responsibilities

• Develop and implement security policies, protocols, and procedures.
• Monitor network traffic for unusual activity and respond to potential threats.
• Conduct regular vulnerability assessments and penetration testing.
• Implement and manage security tools such as NDR, EDR, DLP.
• Investigate security breaches and lead incident response efforts.
• Stay updated with the latest cybersecurity trends and threats.
• Collaborate with IT and other departments to enhance overall security posture.
• Provide training and support to staff on cybersecurity best practices.

Required Qualifications

• Masters/Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Proven experience as a Cybersecurity Engineer or similar role.
• In-depth knowledge of security frameworks and risk management methodologies.
• Experience with network and application security.
• Experience with cloud security and data governance.
• Strong problem-solving and analytical skills.
• Excellent communication and teamwork abilities.
• Relevant certifications such as CISSP, CEH, or equivalent are highly desirable.
• 5-6 years experience in Information Security.

Desired candidate profile

1. Cybersecurity Knowledge: A deep understanding of security principles, including encryption, firewalls, VPNs, intrusion detection systems (IDS), and intrusion prevention systems (IPS).
2. Risk Management: The ability to assess risks and vulnerabilities within an organization’s IT infrastructure and provide strategies to mitigate potential threats.
3. Incident Response: Skilled at identifying, analyzing, and responding to security breaches or cyberattacks. Being able to quickly contain and mitigate damage is essential.
4. Threat Intelligence: Monitoring and analyzing emerging security threats, and keeping up to date with the latest malware, viruses, ransomware, and phishing tactics.
5. Security Audits and Assessments: Conducting regular security audits, vulnerability assessments, and penetration testing to find and fix potential security weaknesses.
6. Firewalls and Network Security: Knowledge of configuring and managing firewalls, routers, and other network security devices to protect the organization’s infrastructure.
7. Security Tools and Software: Familiarity with tools such as antivirus programs, SIEM (Security Information and Event Management) systems, and vulnerability scanners (e.g., Nessus, Qualys).
8. Compliance Knowledge: Understanding of regulatory frameworks such as GDPR, HIPAA, PCI DSS, or NIST that impact security protocols and data protection.