Cyber Security Analyst

Cyber Security Analyst

Experience: 2-4 Years

Employment Type: Full-Time

Job Overview

We are looking for a Cyber Security Analyst to protect our applications, servers, cloud infrastructure, APIs, and organizational systems from security threats. The candidate will be responsible for security monitoring, vulnerability management, incident response, and implementation of security best practices.

Key Responsibilities

• Monitor servers, applications, networks, and security alerts for suspicious activities.
• Perform vulnerability assessments and coordinate remediation.
• Monitor and manage firewall, WAF, VPN, IDS/IPS, and endpoint security solutions.
• Investigate security incidents and perform root cause analysis.
• Review application and API security vulnerabilities based on OWASP standards.
• Perform server and operating system security hardening.
• Monitor authentication logs, unusual login attempts, and suspicious IP activity.
• Manage IAM, access controls, MFA, and privileged user access.
• Review AWS/Azure cloud security configurations.
• Implement security monitoring and alerting using SIEM/log management tools.
• Perform periodic security audits and risk assessments.
• Support penetration testing and vulnerability assessment activities.
• Maintain incident response procedures and security documentation.
• Assist with PCI DSS, ISO 27001, and other security compliance requirements.
• Work with Development and DevOps teams to resolve security vulnerabilities.

Required Skills

• Linux and Windows security
• Network security fundamentals
• Firewall, WAF, VPN, IDS/IPS
• Vulnerability assessment
• OWASP Top 10 and API security
• AWS/Azure security fundamentals
• IAM and access management
• SIEM and security log analysis
• Incident response
• Basic penetration testing knowledge
• SSL/TLS and encryption concepts
• Security tools such as Burp Suite, Nessus/OpenVAS, Nmap, Wireshark, or similar

Preferred Knowledge

• PCI DSS / ISO 27001
• Cloudflare or similar WAF solutions
• DevSecOps and CI/CD security
• Container/Docker security
• SAST/DAST tools
• Database security
• Secure API authentication and authorization