Cyber Security Analyst

What Youll Do Monitor, detect, and respond to security incidents across networks, systems, and applications.Perform vulnerability assessments and coordinate remediation activities.Conduct security risk analysis and recommend mitigation strategies.Investigate security breaches and perform root cause analysis.Manage and monitor security tools such as SIEM, firewalls, IDS/IPS, and endpoint protection systems.Conduct periodic security audits and compliance checks.Implement and enforce security policies, standards, and procedures.Support incident response activities and participate in security drills.Work closely with IT, DevOps, and development teams to strengthen system security.Stay updated on emerging threats, vulnerabilities, and cybersecurity trends. Experience What You Should Know: 2 to 5 years of experience in cybersecurity, information security, or network security roles. Security Monitoring & Tools Hands-on experience with SIEM tools (Splunk, QRadar, or similar).Experience with firewalls, IDS/IPS, antivirus, and endpoint detection & response (EDR).Knowledge of log analysis and threat detection. Vulnerability Management Experience with vulnerability scanning tools (Nessus, Qualys, OpenVAS).Understanding of CVSS scoring and risk prioritization. Network & System Security Strong understanding of TCP/IP, DNS, HTTP/HTTPS, VPNs.Knowledge of Windows/Linux system security hardening. Cloud Security (Preferred) Experience securing AWS, Azure, or GCP environments.Knowledge of IAM policies, cloud monitoring, and data encryption. Compliance & Standards Familiarity with ISO 27001, SOC 2, GDPR, PCI-DSS (as applicable).Experience supporting security audits. Incident Response Understanding of incident handling lifecycle.Ability to perform basic digital forensics and log investigation. Scripting & Automation (Preferred) Basic knowledge of Python, Bash, or PowerShell for automation. Soft Skills Strong analytical and investigative mindset.Excellent documentation and reporting skills.Ability to work under pressure during security incidents. Nice-to-Have Certifications such as CEH, CISSP, Security+, CISM.Experience with penetration testing tools (Metasploit, Burp Suite, Nmap).Exposure to DevSecOps practices.Knowledge of Zero Trust architecture. .