Security Analyst (Ref 24964)

Responsibilities
Security Operations & Incident Response 
• Monitor and investigate security alerts (directly or via SOC)
• Lead or support incident response for: 
1. Malware / ransomware
2. Phishing and account compromise 
3. Insider threats
4. Data leakage incidents 
• Perform vulnerability scanning and risk assessment 
• Analyse scan results and prioritize remediation based on business risk 
• Coordinate patching with IT and application teams 
• Track remediation progress and report risk exposure 
• Tune detections, improve signal quality, and reduce false positives 
• Track emerging threats, vulnerabilities, and attack trends 
• Assess relevance and impact to the organization 
• Translate threat intelligence into actionable controls and detections 
• Governance, Risk & Compliance Support 
• Participate in internal risk assessments and audits 
• Provide security guidance to IT, developers, and business users 
• Support security awareness programs and phishing simulations 
• Act as internal security SME and trusted advisor 

Requirements
• Degree in Computer Science/Information Technology or equivalent 
• At least 3 years’ experience in IT 
• Basic technical knowledge in IT network infrastructure, server platforms (Unix, Windows platform) and desktops (OS X and Windows XP and above) 
• Experience in using security tools (E.g. Security Endpoint solutions, CyberArk, Tenable Nessus, Securonix, Sentinel)) 
• Certified with one or more of the following: QISP, CISSP, Cybersecurity Nexus, CompTIA Security+ 

Licence no: 12C6060