Cyber Security Operations & Analyst

• Perform Level 2 (L2) Security Operations activities and investigate security alerts and incidents escalated by the Level 1 (L1) team.
• Analyze security alerts, suspicious activities, and Indicators of Compromise (IoCs) to identify potential security threats.
• Conduct threat hunting activities to identify potential threats and unusual activities within the security environment.
• Support Cyber Threat Intelligence (CTI) activities by assessing identified threats and their potential impact on the organization's environment.
• Monitor, maintain, and troubleshoot existing security monitoring and protection tools to ensure their availability and operational effectiveness.
• Support security log integration and ensure relevant security events are properly collected and monitored.
• Assist in Proof of Concept (PoC) activities, evaluation, and implementation of new security tools.
• Perform preventive maintenance and troubleshoot operational issues related to security tools and monitoring systems.
• Prepare and maintain Security Operations documentation, procedures, operational guidelines, and reports.
• Collaborate with security, infrastructure, and application teams to investigate and resolve security-related issues.

Minimum Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• 1–2 years of experience in Cyber Security, Security Operations Center (SOC), or a related security role.
• Basic understanding of security monitoring, incident investigation, incident response, and security operations processes.
• Hands-on experience in analyzing security alerts, investigating suspicious activities, and handling security incidents.
• Familiarity with threat hunting, Cyber Threat Intelligence (CTI), Indicators of Compromise (IoCs), and security log analysis.
• Basic knowledge of SIEM, EDR/XDR, endpoint security, vulnerability assessment, or cloud security.
• Familiarity with security tools such as Elastic, Elastic Defend, Microsoft Defender, Cortex XDR, Nessus, Forcepoint, Orca Security, SocRadar, SenhaSegura, Tencent, or similar platforms is an advantage.
• Strong analytical thinking, problem-solving, and troubleshooting skills.
• Good communication skills and the ability to collaborate effectively with cross-functional teams.
• Willingness to learn new security technologies and continuously improve technical capabilities.