Cyber Security Analyst

The Cyber Security Analyst is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats and security incidents within the organization's environment. As a member of the SOC team, this role focuses on protecting enterprise systems, networks, applications, and data through continuous monitoring, threat analysis, incident response, and proactive security operations.

The successful candidate will work closely with security engineers, threat intelligence teams, IT operations, and business stakeholders to identify and mitigate cyber risks while maintaining a strong security posture.

• Monitor security alerts and events from SIEM, EDR/XDR, firewalls, IDS/IPS, cloud security platforms, email security gateways, and other security tools.
• Perform triage and analysis of security events to determine legitimacy, impact, and severity.
• Investigate suspicious activities, indicators of compromise (IOCs), and potential malicious behavior.
• Correlate security events across multiple technologies to identify attack patterns and emerging threats.
• Escalate incidents based on established procedures and severity classifications.
• Participate in cybersecurity incident response activities.
• Investigate phishing attacks, malware infections, unauthorized access attempts, credential compromise, data exfiltration, and insider threats.
• Collect, preserve, and analyze security evidence.
• Document findings and maintain detailed incident records.
• Support incident containment, eradication, recovery, and post-incident reviews.

• Bachelor's degree in Cyber Security, Computer Science, Information Technology, or related field, or equivalent practical experience.
• 2+ years of experience in a Security Operations Center (SOC), cyber defense, security monitoring, or incident response role.
• Strong understanding of cybersecurity principles, attack methodologies, and threat actor tactics.
• Experience using SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, Arc Sight, or similar.
• Experience investigating security incidents across Windows, Linux, cloud, and network environments.
• Knowledge of network protocols including TCP/IP, DNS, HTTP/S, SMTP, and VPN technologies.
• Familiarity with endpoint security and EDR/XDR solutions.
• Strong analytical and problem-solving skills.
• Ability to work in a fast-paced operational environment.
• CompTIA Security+
• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• Certified Information Security Manager (CISM)
• GIAC Certifications
• Microsoft Security Certifications (SC-200, SC-300, SC-100)
• Global Industrial Cyber Security Professional (GICSP)
• Risk awareness and commercial judgement
• Analytical thinking
• Collaboration and teamwork
• Ability to remain calm under pressure
• Strong organisational skills
• Commitment to safety, quality, and operational excellence

• Reduction of false positives.
• Documentation & knowledge management.
• Effective protection of manufacturing and business-critical systems.
• Improvement in overall cyber security maturity across IT and OT environments.