Cybersecurity Analyst job description

Job brief

We are seeking a proactive Cybersecurity Analyst to join our security operations team and fortify our defense-in-depth strategy. You will play a critical role in threat hunting, security auditing, and the implementation of automated incident response protocols across our cloud and on-premise environments. If you are passionate about staying ahead of cyber attackers, securing scalable systems, and collaborating with cross-functional teams to foster a culture of security, we want to hear from you. This role offers the opportunity to influence our long-term security architecture while protecting data for our global user base.

What is a Cybersecurity Analyst?

A Cybersecurity Analyst is a vital information security professional tasked with safeguarding an organization’s digital assets, networks, and sensitive data from cyber threats. By employing advanced tools for intrusion detection, vulnerability scanning, and threat intelligence, a Cybersecurity Analyst ensures that an organization’s security posture remains resilient against evolving global cyber risks. Their expertise is foundational to maintaining business continuity, protecting customer privacy, and upholding the integrity of complex technical infrastructure.

What does a Cybersecurity Analyst do?

A Cybersecurity Analyst actively monitors network traffic for suspicious activity using SIEM platforms like Splunk or IBM QRadar to detect potential data breaches. They perform regular vulnerability assessments and penetration testing on applications and cloud infrastructure, translating complex findings into actionable remediation plans for development teams. Additionally, they work closely with IT operations to patch critical system flaws, enforce identity and access management (IAM) policies, and lead incident response efforts during security events.

Key responsibilities

• Monitor security dashboards and SIEM tools 24/7 to identify, investigate, and mitigate unauthorized access or malicious network activity.
• Execute regular vulnerability scans and penetration tests on critical software applications to identify security gaps before they can be exploited.
• Develop and maintain comprehensive incident response playbooks to ensure rapid containment and recovery during high-impact security breaches.
• Configure and manage firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint protection platforms across our multi-cloud environment.
• Analyze logs and traffic patterns using tools like Wireshark or ELK Stack to correlate security events and perform deep-dive forensic investigations.
• Collaborate with DevOps teams to integrate automated security checks into CI/CD pipelines, ensuring secure code delivery without slowing deployment velocity.
• Enforce organizational security policies and IAM standards by managing user permissions, multi-factor authentication, and role-based access control.
• Draft detailed security assessment reports and executive briefings detailing risk levels, compliance status, and recommended remediation for leadership teams.

Requirements and skills

• Proven 3+ years of experience in security operations, threat analysis, or incident response within enterprise-scale IT environments.
• Expertise in operating and managing security platforms such as Splunk, CrowdStrike, Tenable, or Qualys for threat detection and assessment.
• Strong proficiency in cloud security best practices across AWS (GuardDuty, IAM, WAF) or Microsoft Azure Security Center.
• Deep understanding of network protocols (TCP/IP, DNS, HTTPS) and common attack vectors like SQL injection, XSS, and DDoS mitigation.
• Hands-on experience with scripting languages such as Python or PowerShell to automate security tasks and streamline log analysis.
• Industry-recognized certification such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or GIAC GCIH.
• Familiarity with regulatory frameworks and compliance standards including GDPR, HIPAA, SOC2, or NIST Cybersecurity Framework.
• Exceptional ability to document complex security threats and communicate technical risks clearly to non-technical business stakeholders.

FAQs