Senior Cyber Security Analyst

Role & responsibilities:

• Monitor and investigate security events using SIEM, EDR/XDR, and cloud security platforms.
• Lead cybersecurity incident response, root cause analysis, containment, and recovery activities.
• Conduct vulnerability assessments, remediation tracking, and risk reporting.
• Perform penetration testing, ethical hacking, web application security testing, and cloud security assessments.
• Execute Red Team and Purple Team exercises to evaluate security controls and detection capabilities.
• Conduct threat hunting activities and develop security use cases.
• Review security architecture, configurations, and access controls across cloud and on-premise environments.
• Support secure software development, application security testing, and DevSecOps initiatives.
• Participate in ISO 27001, SOC 2, and regulatory compliance audits.
• Conduct third-party/vendor security assessments.
• Provide security awareness training and mentor junior security analysts.

Preferred candidate profile

• Hands-on experience in Security Operations, Incident Response, Vulnerability Management, and Penetration Testing.
• Experience securing Azure and SaaS environments.
• Knowledge of cloud, network, endpoint, and application security.

Required Tools & Technologies:

Security Operations: Microsoft Sentinel, Microsoft Defender XDR, BitDefender, Splunk

Vulnerability Management: Nessus, Tenable.io, Qualys, Rapid7

Web & Application Security: Burp Suite Professional, OWASP ZAP, Postman

Network Security: Nmap, Wireshark, TCPDump, Palo Alto, Fortinet, Cisco Firewalls

Penetration Testing & Red Teaming: Metasploit, BloodHound, Mimikatz, Impacket, Cobalt Strike, Hashcat, Hydra

Cloud Security: Microsoft Azure, Microsoft Defender for Cloud, Entra ID, Conditional Access

DevSecOps: Veracode, SonarQube, GitHub Advanced Security, Snyk

Preferred Certifications:

CISSP, CISM, OSCP, CEH, PNPT, GCIH, AZ-500, SC-200, SC-300.