Job description
The Cyber Security Analyst will be responsible for protecting all of the companys hardware, software, and networks from cybercriminals. The analyst's primary role will be to understand the company IT infrastructure in detail in order to detect, evaluate and respond to threats that could potentially breach the network. The Cyber Security Analyst provides specific guidance and coaching to key security areas, e.g. key and encryption, secure software development. In this capacity, a cyber security analyst is part of the proactive work to help shape the tech delivery of the organization.The successful incumbent must possess excellent analytical, communication skills and be solution oriented.
RESPONSIBILITIES AND DUTIES
Responsible for understanding the global threat landscape and acting on threat intelligence.
Conduct cyber security incident response, following industry standards of containment, eradication, recovery and lessons learned.
Manage containment and eradication of threats and remediation of environment during or after an incident, including identifying potential business impact and communication with stakeholders
Manage information security-related breaches
Document event analysis and write reports of incident investigations.
Perform forensic analysis on threat indicators and intelligence insight and identify impact of vulnerabilities
Support the tech delivery in product and services teams with expert security knowledge relevant to a specific technology area or domain (e.g. Key & encryption, secure software development)
Develop the required processes and tools to support the tech delivery teams
Define and develop security guardrails relevant to the tech area/domain
The above responsibilities are indicative of the work required and should not be seen as an exhaustive list.
KNOWLEDGE AND SKILLS
Security solutions (proxy, email gateway, IDS/IPS, FW, SIEM, SOAR, EDR etc.)
Cloud, key and encryption management, SDLC concepts
IT and security architecture
Excellent English skills, both written and spoken.
QUALIFICATIONS AND EXPERIENCE
BSc. in Computer Science, Computer Engineering, Mathematics, Information Security or any related field (or equivalent work experience).
Minimum of 3 years experience in the field
Penetration testing (OWASP, MITRE etc.) experience
Cyber Security certifications (e.g. Security+, GCIA, GCIH, GREM, CISSP, CEH, GCFA)
DESIRED ATTRIBUTES AND BEHAVIOURAL COMPETENCIES
Apply fundamental security concepts to cyber defense and understand business and risk to guide the cyber defense day to day operations.
Manage cases with enterprise SIEM or Incident Management systems
Support network investigations and network monitoring in a SOC environment.
Perform vulnerability assessment and penetration testing
SPECIAL CONDITIONS
N/A
FUNCTIONAL RELATIONSHIPS
External: N/A
Internal: Development team, Tech Lead, CTO
PERFORMANCE CRITERIA
Timely delivery of agreed daily, weekly and monthly KPIs
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.