Description

Job Summary:

A growing organization is seeking a Cybersecurity Analyst to support and enhance its cybersecurity operations, threat detection, incident response, and data protection initiatives. This role is ideal for a security professional who enjoys investigating threats, improving security controls, and partnering with stakeholders to strengthen overall security posture.

Position Overview:

    Investigate and respond to cybersecurity incidents across cloud, endpoint, identity, email, application, and network environments.
    Monitor and maintain security events within a SIEM environment, including alert triage, threat analysis, and incident escalation.
    Develop and leverage KQL queries for investigations, reporting, threat hunting, and detection tuning.
    Support incident response activities including containment, remediation, recovery, and post-incident reviews.
    Enhance security monitoring capabilities by reducing false positives, identifying gaps, and improving detection coverage.
    Assist with data protection initiatives including DLP investigations, information protection, insider risk monitoring, auditing, and eDiscovery activities.
    Participate in security risk assessments, control reviews, vendor evaluations, and compliance-related initiatives.
    Create and maintain security procedures, runbooks, metrics, and technical documentation.
    Collaborate with stakeholders across the business to communicate risks, findings, and recommended security improvements.
    Participate in an on-call rotation supporting critical cybersecurity incidents.

Requirements:

    8+ years of experience in cybersecurity, security operations, incident response, threat detection, governance, risk, or compliance.
    Hands-on experience with SIEM platforms, preferably Microsoft Sentinel.
    Experience writing and modifying Kusto Query Language (KQL) queries.
    Knowledge of security frameworks such as NIST, CIS Controls, or similar industry standards.
    Experience with endpoint protection, identity security, email security, vulnerability management, and cloud security technologies.
    Familiarity with data protection technologies including DLP, information classification, and audit monitoring.
    Strong analytical, troubleshooting, and investigative skills.
    Ability to effectively communicate with both technical and non-technical stakeholders.
    Experience with Microsoft 365 security technologies and cloud-based security operations preferred.
    Relevant certifications such as Security+, CySA+, SC-200, SC-300, CISSP, or equivalent are preferred

Key Skills

Education

Any Graduate