Security Analyst

Key Responsibilities • Continuously monitor, analyse, triage and close security events, alerts and requests received from the managed SOC, security systems and users. • Support the Incident Manager and relevant stakeholders in investigating, containing, remediating and recovering from security incidents to minimise business impact. • Enhance SOC detection and response playbooks, develop new incident-response procedures, and maintain clear processes for escalation, communication, evidence collection and documentation. • Use analytical and data-visualisation tools to automate analysis, derive insights from large datasets, correlate information across SIEM and other data sources, and investigate anomalous activity against established baselines to determine root cause. • Apply AI-driven and machine-learning capabilities, where appropriate, to support real-time security investigations, threat triage, containment and remediation, escalating issues when required. • Apply ethical-hacking knowledge to identify potential threats and vulnerabilities and recommend appropriate remediation measures. • Perform digital-forensics analysis of security events and alerts while following established evidence-handling and chain-of-custody practices. • Apply reverse-engineering techniques, where required, to understand software behaviour and support malware analysis. • Develop security-monitoring reports, metrics and dashboards for asset owners and management. • Stay current with emerging cyber threats, vulnerabilities, attack techniques and industry developments, and translate relevant intelligence into detection and response improvements. • Participate in cybersecurity exercises, including cyber-range simulations and business continuity exercises. Looking for: • At least 3+ years of hands-on information-security experience in a SOC analyst, incident-response analyst, incident-handler or comparable role. • Strong hands-on cybersecurity experience with enterprise SIEM platforms, such as Google Security Operations SIEM, together with a sound understanding of the cyber kill chain, tactics, techniques and procedures (TTPs), threat intelligence and malware triage • Ability to analyse large datasets and packet-level data, operate network and endpoint security technologies, including NIDS/NIPS, firewalls, HIPS, proxies, anti-malware tools, vulnerability scanners and interpret the security events they generate. • Strong understanding of common attacks targeting systems, networks and applications. • Strong knowledge of internet infrastructure, networking and network security, including DNS, DHCP, firewalls, WAF, IDS/IPS, VPN, advanced persistent threats and TCP/IP protocols. • Relevant industry certifications, such as Certified SOC Analyst (CSA), CISSP, CEH, GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), or equivalent, are preferred. • Strong analytical and problem-solving skills, with a self-motivated, detailoriented and collaborative approach. • Malware triage and analysis capability is an advantage. • Willingness to learn and contribute effectively in a collaborative team environment. • Ability to remain composed, prioritise effectively and work under pressure during cyber security incident investigation and response. • Good interpersonal, written and verbal communication skills.