Security Analyst

Requirements Education and Experience: Bachelor’s degree in Cybersecurity, Information Technology, or a related field (preferred). Minimum of 2 year of experience working in a Security Operations Centre (SOC) or a similar security-focused role. Skills and Qualifications: SIEM Experience: Hands-on experience with SIEM tools like Splunk, QRadar, or ArcSight for monitoring, detecting, and analyzing security events.

Incident Triage and Investigation: Basic understanding of incident response processes, including triaging alerts, analyzing suspicious activity, and escalating critical incidents. Network Security Knowledge: Familiarity with network security technologies such as firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint security solutions. Threat Detection and Response: Ability to detect and respond to malware, phishing attacks, and other cyber threats.

Threat Hunting: Foundational knowledge in conducting proactive threat hunting to detect unknown threats or vulnerabilities. Vulnerability Management: Basic understanding of identifying and reporting vulnerabilities within systems and networks. Security Best Practices: Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001) and best practices for incident detection and response.

Technical Skills: Strong analytical skills for investigating security incidents and identifying root causes. Knowledge of malware analysis and phishing detection techniques. Experience with security incident management and basic forensic analysis.

Certifications (Preferred): CompTIA Security, Certified Ethical Hacker (CEH), Certified SOC Analyst (CSA), or CySA. Soft Skills: Strong verbal and written communication skills to document incidents and collaborate with IT and security teams. Excellent problem-solving skills and attention to detail.

Ability to work effectively in a team-oriented SOC environment. Shift Requirements: Willingness to work in shifts or on-call rotation, as many SOCs operate 24/7. Strong desire to learn and grow in cybersecurity and SOC operations.

These requirements are geared toward a candidate with foundational experience in SOC environments, with the potential to expand their knowledge and expertise in security analysis and incident response.