As a Senior Cyber Security Analyst,
You will safeguard our infrastructure and users, minimizing risks posed by cyber threats. You will promptly and effectively handle cyber attacks and data breaches, ensuring minimal recurrence of incidents.
Some of the things we expect you to do are to:
- Assist in monitoring company compliance to IT security policies.
- Assist with incident response and execution of company security incident response plan.
- Monitor and manage security events and alerts from a variety of sources (Azure, Defender, Keeper, Cloudflare etc).
- Assess and mitigate CVE’s and CVSS’s from multiple threat intelligence sources.
- Monitor threat intelligence and ensure risk mitigation and communication through the company where necessary.
- Assist with cybersecurity and phishing training for staff.
- Assist in maintaining and implementing GPO policies in Azure.
- Implement Identity Management via SSO across all MS Azure compliant tools used by the business.
- Works with Network Specialist to manage and monitor VPN and firewall rules.
- Works with System Administrator manage and monitor Azure.
- Ensure that IT security audits are conducted periodically or as needed.
- Assist in the development and maintenance of the Business Continuity (BC) and Disaster Recovery (DR) plans.
- Assist in development, maintenance and testing of the company’s security incident response plan.
- Develop and understand all testing necessary for a successful BC/DR execution.
- Assist and mentor desktop support and end users when they need to install or learn about new security products and/or procedures.
We would need you to be or have the following:
- Understanding of risk, threats, and vulnerabilities.
- Strong grasp of technical security controls with practical implementation experience.
- Proficiency in Microsoft Intune and Defender.
- Competence in Certificates, MFA (Multi-Factor Authentication), Vulnerability Management, and Penetration Testing.
- Familiarity with the NIST Cybersecurity Framework.
- Experience with Microsoft Active Directory or certification.
- Knowledgeable in incident response principles.
- Familiarity with threat intelligence and frameworks like MITRE ATT&CK.
- Exposure to IS027001 and SOC2 security frameworks.
- Familiarity with different IT domains: Network, Infrastructure, Systems Administration, Software Development, Database Administration, Change Management, Incident Management.
- Prior experience with ISO documentation and standards.
It would be awesome if you are or also have:
- Strong cybersecurity tooling (MDM, Endpoint protection, IDS, WAF, Password Manager)
- Ability to identify gaps and/or risk exposure in programs.
- Strong problem solving and organizational skills.
- Strong written/verbal communication skills.
- Able to interact with stakeholders in cross-functional teams.
- Good team player interested in sharing knowledge and cross-training other team members and shows interest in learning new technologies and products.
- Ability to create quality documents
