K
Cyber Security Analyst
Job Description
KRFS is looking for a skilled and proactive Cyber Security Analyst to protect our digital platforms, applications, systems, and sensitive financial information from cyber threats. The candidate will monitor security activities, identify vulnerabilities, investigate incidents, and support the implementation of effective security controls.
Key Responsibilities
Monitor security alerts, logs, networks, applications, and systems for suspicious activities.
Identify, investigate, and respond to cybersecurity incidents.
Conduct vulnerability assessments and coordinate remediation of security weaknesses.
Support penetration testing and security assessments of applications and infrastructure.
Implement and monitor security controls, access controls, and authentication mechanisms.
Assist in protecting customer, financial, and organizational data.
Investigate potential phishing, malware, unauthorized access, and other security threats.
Maintain incident reports, security documentation, and audit records.
Work with IT, development, compliance, and risk teams to address security issues.
Support cybersecurity and compliance audits.
Stay updated on emerging cyber threats, vulnerabilities, and security best practices.
Assist in developing and maintaining KRFS information security policies and procedures.
Requirements
Bachelor's degree in Computer Science, Information Technology, or related field
2-5 years of experience in cybersecurity, network security, or IT infrastructure
Strong knowledge of network security protocols, firewalls, and intrusion detection/prevention systems
Experience with vulnerability assessment and penetration testing tools
Familiarity with security frameworks and compliance standards (ISO 27001, RBI IT guidelines, PCI-DSS)
Understanding of data protection regulations and encryption standards
Experience in incident response and threat monitoring
Relevant certifications preferred: CEH, CISSP, CompTIA Security+, or equivalent
Strong analytical and problem-solving skills
Ability to work under pressure during security incidents
Key Responsibilities
Monitor security alerts, logs, networks, applications, and systems for suspicious activities.
Identify, investigate, and respond to cybersecurity incidents.
Conduct vulnerability assessments and coordinate remediation of security weaknesses.
Support penetration testing and security assessments of applications and infrastructure.
Implement and monitor security controls, access controls, and authentication mechanisms.
Assist in protecting customer, financial, and organizational data.
Investigate potential phishing, malware, unauthorized access, and other security threats.
Maintain incident reports, security documentation, and audit records.
Work with IT, development, compliance, and risk teams to address security issues.
Support cybersecurity and compliance audits.
Stay updated on emerging cyber threats, vulnerabilities, and security best practices.
Assist in developing and maintaining KRFS information security policies and procedures.
Requirements
Bachelor's degree in Computer Science, Information Technology, or related field
2-5 years of experience in cybersecurity, network security, or IT infrastructure
Strong knowledge of network security protocols, firewalls, and intrusion detection/prevention systems
Experience with vulnerability assessment and penetration testing tools
Familiarity with security frameworks and compliance standards (ISO 27001, RBI IT guidelines, PCI-DSS)
Understanding of data protection regulations and encryption standards
Experience in incident response and threat monitoring
Relevant certifications preferred: CEH, CISSP, CompTIA Security+, or equivalent
Strong analytical and problem-solving skills
Ability to work under pressure during security incidents
More Info
Key Skills
compliance standards
security frameworks
encryption standards
threat monitoring
network security protocols
penetration testing tools
data protection regulations
intrusion detection prevention systems
About Company
Skills:
Nmap, Firewall, Iam, Siem, Application Security, Waf, Qualys, Vulnerability management and risk-based prioritization, Vulnerability assessment and penetration testing methodologies, Common vulnerability scoring concepts such as CVSS, Cloud security concepts, Nessus, Exploitability assessment, EDR, Endpoint security technologies, Tenable, Network and infrastructure security fundamentals, Security testing tools such as Burp Suite
Skills:
cloud security, Incident Response, Gcp, Threat Hunting, Iam, Siem, Splunk, Log Analysis, PAM, Cyberark, Azure, Qradar, AWS, XDR, Beyond Trust, Sentinel One, Zero Trust Architecture, CrowdStrike, Seceon, EDR
Skills:
vulnerability assessment, Application Security, Penetration Testing, Security Architecture, integration with SOC, threat detection, infrastructure reviews, network traffic monitoring, GRC activities
Skills:
security automation , Python, Sophos, Incident Response, PowerShell, Power Bi, Batch, Power Automate, Vulnerability Management, Microsoft Sentinel, Nessus, Microsoft Defender for Endpoint, Logic Apps
Skills:
Firewalls, anti-virus software, intrusion detection systems, Security Assessments, vulnerability audits, risk assessment tools, Security Policies, data encryption programs