Phishing Analyst

Scope of Work:

• Assist in the identification and analysis of phishing attempts, including email phishing, spear phishing, and whaling, to protect organizational assets and sensitive information.
• Collaborate with senior cybersecurity team members to enhance phishing detection capabilities and implement protective measures against phishing threats.
• Participate in the examination of suspicious emails and websites, using tools and techniques to identify malicious content and assess the risk to the organization.
• Support the response to confirmed phishing incidents, including recommending actions to mitigate damage and prevent future occurrences, under guidance from experienced analysts.
• Contribute to the development and maintenance of a phishing incident database, documenting attack vectors, tactics, and indicators of compromise for future reference.
• Engage in security awareness initiatives, helping to design and deliver training sessions focused on phishing recognition and response for employees across the organization.
• Work closely with the IT department to ensure the proper configuration of email filters, web proxies, and other security tools to reduce the risk of phishing attacks.
• Assist in the continuous improvement of phishing defense strategies by staying informed about the latest phishing techniques and countermeasures.
• Participate in the creation and updating of standard operating procedures (SOPs) for phishing incident detection, analysis, and response.
• Support cross-functional teams during security audits and assessments by providing insights and data on phishing threats and organizational readiness.

Skills:

• Basic understanding of cybersecurity and phishing tactics
• Familiarity with email systems, security tools, and incident response processes
• Analytical skills for evaluating suspicious emails and web content
• Attention to detail and ability to recognize indicators of phishing attempts
• Effective communication skills for reporting findings and contributing to security awareness

Certification (Optional but beneficial):

• CompTIA Security+