Job Title: Advanced Cybersecurity Analyst
Job Summary:
The Advanced Cybersecurity Analyst will play a pivotal role in safeguarding the organization’s digital assets and sensitive information by identifying and mitigating cybersecurity threats. They will conduct advanced security analysis, manage incident responses, and implement strategies to protect against evolving cyber threats. The role requires expertise in security protocols, advanced risk analysis, and experience with cybersecurity tools and technologies.
Key Responsibilities:
- Threat Detection & Response:
- Continuously monitor and analyze security alerts from various systems (firewalls, IDS/IPS, SIEM).
- Proactively identify and investigate potential threats and security incidents.
- Coordinate and manage incident response, including containment, eradication, and recovery phases.
- Security Audits & Assessments:
- Perform security audits, vulnerability assessments, and penetration testing.
- Develop and implement security policies, standards, and procedures.
- Conduct regular system scans, reviews, and risk assessments to ensure security measures are up to date.
- Risk Management:
- Identify vulnerabilities in network systems and recommend appropriate safeguards.
- Collaborate with IT teams to ensure systems are updated with the latest security patches and configurations.
- Develop and maintain risk management strategies to protect sensitive data and mitigate threats.
- Security Architecture:
- Design and implement advanced security solutions that fit within the organization’s infrastructure.
- Ensure the integrity and security of enterprise-wide systems, including servers, endpoints, and cloud services.
- Work with teams to review system architectures and ensure they meet security requirements.
- Advanced Threat Hunting:
- Lead threat-hunting exercises to detect advanced persistent threats (APTs) or zero-day vulnerabilities.
- Analyze new and emerging threats, recommend mitigation strategies, and implement new technologies.
- Compliance & Governance:
- Ensure the organization complies with industry standards (e.g., ISO 27001, GDPR, HIPAA, etc.).
- Work with legal and compliance teams to align security policies with regulations.
- Prepare reports for senior management, regulatory bodies, and audit committees.
- Training & Awareness:
- Train and mentor junior cybersecurity team members.
- Provide regular security awareness training to employees and stakeholders to reduce risks.
- Stay updated with the latest cyber threats, vulnerabilities, and technology advancements.
Required Qualifications:
- Education: Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
- Certifications:
- Certified Information Systems Security Professional (CISSP)
- Certified Ethical Hacker (CEH)
- GIAC Security Essentials (GSEC)
- Offensive Security Certified Professional (OSCP) (preferred)
- Experience:
- Minimum of 5-7 years of experience in a cybersecurity role, with advanced knowledge in network security, endpoint protection, and threat intelligence.
- Experience with cybersecurity tools such as SIEM, firewalls, IDS/IPS, vulnerability management platforms, and endpoint detection and response (EDR) systems.
- Technical Skills:
- Proficiency in network security, encryption technologies, malware analysis, and advanced threat hunting.
- Strong knowledge of operating systems (Linux, Windows), cloud security (AWS, Azure), and virtualization.
- Expertise in scripting languages (Python, PowerShell) for automation and security monitoring.
- Soft Skills:
- Excellent analytical and problem-solving skills.
- Strong communication skills for reporting complex security incidents to technical and non-technical stakeholders.
- Ability to work in a fast-paced, high-stress environment while managing multiple security events simultaneously.
Preferred Qualifications:
- Master’s degree in Cybersecurity or related field.
- Experience in managing cybersecurity for large enterprises or cloud environments.
- Familiarity with advanced AI/ML threat detection techniques.
