Cyber Security Analyst

Role & responsibilities

• Investigate and respond to security alerts and cyber incidents from triage through containment, eradication, remediation and closure.
• Conduct threat hunting, IOC/TTP analysis and malicious behaviour investigation.
• Perform host and network triage, including investigation of Windows/Linux systems, network activity and security logs.
• Investigate malware, phishing, ransomware and account compromise incidents.
• Work with SIEM, EDR/XDR and other security technologies to detect, investigate and respond to threats.
• Develop and enhance detection rules, response mechanisms, scripts and automation to improve security operations.
• Analyse security data and contribute to incident RCA, post-incident reviews and continuous improvement.
• Support Cyber Defence projects and improvements across global/regional environments.
• Collaborate with IT/OT, Cybersecurity and other technology teams for incident containment and remediation.
• Contribute to incident response procedures, playbooks and operational handovers across global teams.

Preferred candidate profile

• 5+ years of hands-on experience in Incident Response, Cyber Defence, SOC/Blue Team or Cybersecurity Operations.
• Previous experience as a SOC Analyst/L2-L3 Analyst, Incident Responder, Cyber Defence Analyst, Threat Hunter or similar role.
• Strong experience with Incident Response, Threat Hunting and security incident investigation.
• Hands-on experience with SIEM and EDR/XDR platforms such as Microsoft Sentinel/Defender, CrowdStrike, SentinelOne, Splunk, QRadar, Elastic or similar.
• Good understanding of network services and protocols, Windows/Linux environments and security logs.
• Experience with PowerShell and/or Python and query languages such as KQL, SPL or SQL.
• Exposure to malware/phishing investigation, digital forensics, detection engineering and security automation will be an advantage.