Information Security Analyst
Responsibilities
What You Will Do:
- Review security events that are populated in a Security Information and Event Management (SIEM) system to develop accurate remediation actions
- Independently follow procedures to contain, analyse, and eradicate malicious activity
- Conduct proactive threat research using real-world security data and systems automation
- Review, respond, and build alerts
- Supervise current and trending remediation efforts
- Serve as a technical specialist for analysing and identifying security vulnerabilities in web applications, operating systems, and networks
- Report to stakeholders on security status of the environment including, trend analysis and remediation efforts
- Frequently document and communicate security risks, collaborating with internal and external partners
Requirements
Required Job Qualifications
- A college degree or equivalent experience in cyber security
- Verbal communications skills and concise written communication skills
- Business savvy and an eye for detail with timely execution
- Able to deal with high priority, time-sensitive issues
- Ability to multitask and switch between multiple high priority projects
- Organisation and multi-tasking skills
- Understanding of the current threat and vulnerability landscape
- Experience with and understanding of database systems, web servers, application servers, firewalls, routers, load balancers, switches, etc
- Understanding of Application Security and the OWASP top 10 principles
- Experience with enterprise endpoint detection tools
- Dependability: Meet commitments, work independently, accept accountability, be adaptable to change, set personal standards
- Ability to effectively report trends regular reporting
- Understanding of industry standard methodologies in application & operations security
- Knowledge of emerging threats, mitigations and industry trends
- Solid grasp of Windows and Linux operating systems
Education:Education
- Other Beneficial Qualifications
- Demonstrated ability in testing proof of concept exploits to identify potential vulnerabilities
- Proficient in scripting(any): Python, Ruby, Pearl, PowerShell
- Certifications (any): CEH, GCIH, Security+, CCNA Cyber Ops, GWAPT, GPEN, OSCP, OSWE
- Solid grasp of public cloud infrastructure and architecture (AWS, Azure, GCP) and associated security concepts and challenges
Additional Information
- Contract duration: 1 year, with possibility of extension
- Employment type: Only CIM contract
- Work setup: Hybrid, 1-2 days per week in the office
