Cyber Security Analyst

Job Purpose

The Cyber Security Analyst is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats and security incidents within the organization's environment. As a member of the SOC team, this role focuses on protecting enterprise systems, networks, applications, and data through continuous monitoring, threat analysis, incident response, and proactive security operations.

The successful candidate will work closely with security engineers, threat intelligence teams, IT operations, and business stakeholders to identify and mitigate cyber risks while maintaining a strong security posture.

Key Responsibilities

Security Monitoring & Detection

• Monitor security alerts and events from SIEM, EDR/XDR, firewalls, IDS/IPS, cloud security platforms, email security gateways, and other security tools.
• Perform triage and analysis of security events to determine legitimacy, impact, and severity.
• Investigate suspicious activities, indicators of compromise (IOCs), and potential malicious behavior.
• Correlate security events across multiple technologies to identify attack patterns and emerging threats.
• Escalate incidents based on established procedures and severity classifications.

Incident Response

• Participate in cybersecurity incident response activities.
• Investigate phishing attacks, malware infections, unauthorized access attempts, credential compromise, data exfiltration, and insider threats.
• Collect, preserve, and analyze security evidence.
• Document findings and maintain detailed incident records.
• Support incident containment, eradication, recovery, and post-incident reviews.

Knowledge, Skills and Experience

Essential

• Bachelor's degree in Cyber Security, Computer Science, Information Technology, or related field, or equivalent practical experience.
• 2+ years of experience in a Security Operations Center (SOC), cyber defense, security monitoring, or incident response role.
• Strong understanding of cybersecurity principles, attack methodologies, and threat actor tactics.
• Experience using SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, or similar.
• Experience investigating security incidents across Windows, Linux, cloud, and network environments.
• Knowledge of network protocols including TCP/IP, DNS, HTTP/S, SMTP, and VPN technologies.
• Familiarity with endpoint security and EDR/XDR solutions.
• Strong analytical and problem-solving skills.
• Ability to work in a fast-paced operational environment.

Desirable

• CompTIA Security+
• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• Certified Information Security Manager (CISM)
• GIAC Certifications
• Microsoft Security Certifications (SC-200, SC-300, SC-100)
• Global Industrial Cyber Security Professional (GICSP)

Key Competencies

• Risk awareness and commercial judgement
• Analytical thinking
• Attention to detail
• Effective decision-making
• Collaboration and teamwork
• Stakeholder management
• Continuous improvement mindset
• Ability to remain calm under pressure
• Strong organisational skills
• Commitment to safety, quality, and operational excellence

Success Measures

• Alert triage performance.
• Incident response effectiveness.
• Reduction of false positives.
• Documentation & knowledge management.
• Effective protection of manufacturing and business-critical systems.
• Improvement in overall cyber security maturity across IT and OT environments.