Information Security Analyst

About the Job: We are seeking an Information Security Analyst to support our cybersecurity operations, vulnerability management, security monitoring, risk assessment, and compliance activities. The role will focus on identifying and remediating security risks, monitoring security events, conducting vulnerability assessments, maintaining security processes and policies, and preparing security performance reports for management.

Job Requirements:

• 0–3 years of experience in Information Security, Cybersecurity, IT Security, or a related field.
• Hands-on experience or working knowledge of vulnerability assessment and security tools such as Qualys, OpenVAS/Greenbone, SonarQube, Checkmarx, Microsoft Defender, and SIEM platforms.
• Working knowledge of Windows and Linux server security.
• Understanding of network security technologies including firewalls, routers, IDS/IPS, and network security monitoring.
• Working knowledge of Microsoft Azure security services, security policies, and cloud security controls.
• Good understanding of information security principles, cybersecurity controls, access control, encryption, security monitoring, and vulnerability management.
• Familiarity with security assessments, technology risk assessments, audits, and compliance requirements.
• Strong analytical and problem-solving skills.
• Good verbal and written communication skills, with the ability to explain technical security concepts to non-technical stakeholders.
• Certifications such as CISSP, CEH, OSCP, GIAC, or recognized cybersecurity/cloud-security certifications will be an advantage.

Key Responsibilities:

• Perform vulnerability assessments across servers, network devices, endpoints, applications, and cloud environments.
• Conduct internal and external vulnerability assessments using industry-standard security tools.
• Monitor and investigate security alerts from Microsoft Defender, SIEM, IDS/IPS, antivirus, and other security monitoring platforms.
• Review, validate, prioritize, and coordinate remediation of security vulnerabilities and security alerts based on business risk and severity.
• Conduct security monitoring across NIDS, HIDS, antivirus, SIEM, log management, and vulnerability scanning systems.
• Research security vulnerabilities, threats, and incidents and recommend appropriate mitigation measures.
• Coordinate information security risk assessments across business and technical functions.
• Support Azure security and policy management activities.
• Develop and maintain security policies, standards, procedures, and process documentation.
• Prepare security metrics, dashboards, risk indicators, vulnerability reports, and remediation progress reports for senior management.
• Collaborate with infrastructure, network, application, cloud, and technology teams to resolve security issues.
• Support security assessments, audits, compliance activities, and regulatory requirements.
• Maintain security documentation, assessment records, remediation plans, and audit evidence.
• Monitor emerging cybersecurity threats, vulnerabilities, technologies, and industry best practices and recommend improvements to the organization's security posture.