Security Analyst

• Monitor security events, alerts, and logs across enterprise systems and infrastructure.
• Detect, investigate, and respond to potential security incidents and threats.
• Analyze security alerts from SIEM, EDR, firewall, endpoint, and other security tools.
• Perform initial investigation, triage, and escalation of security incidents.
• Conduct threat analysis to identify suspicious activities, vulnerabilities, and potential attacks.
• Troubleshoot and investigate security-related incidents and anomalies.
• Support incident response activities and follow established security response procedures.
• Use SIEM platforms to correlate logs, identify patterns, and investigate security events.
• Work with SOAR and security automation tools to automate repetitive security monitoring and response activities.
• Document security incidents, investigation findings, and remediation actions.
• Collaborate with Network, Server, System, and IT teams to contain and resolve security incidents.
• Stay updated on emerging cybersecurity threats, attack techniques, and security best practices.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Relevant experience in SOC, Security Operations, Security Analysis, or Cybersecurity.
• Understanding of security monitoring, incident detection, and incident response.
• Hands-on exposure to SIEM/security monitoring tools.
• Ability to investigate security alerts and perform basic threat analysis.
• Experience troubleshooting and responding to security incidents.
• Familiarity with SOAR platforms and security automation is preferred.
• Good understanding of network and system security concepts.
• Ability to analyze logs, alerts, and security events.
• Strong analytical and problem-solving skills.
• Good communication and incident documentation skills.

We are looking for a Security Analyst / SOC professional with practical experience in security monitoring, incident detection, investigation, and response. The ideal candidate should be comfortable analyzing alerts and logs, identifying potential threats, troubleshooting security incidents, and working with SIEM or other security tools.

Candidates with exposure to SOAR, security automation, SIEM, EDR, threat analysis, and incident response should be prioritized.