Security Analyat

Security Analyst
Remote
US EST Time

A Security Analyst, also known as an Information Security Analyst or Cybersecurity Analyst, is a professional responsible for protecting an organization's computer systems and networks. This role involves identifying and mitigating potential security threats, managing security tools, and ensuring compliance with security policies and regulations. Below is a detailed job profile for a Security Analyst:

Required Skills and Qualifications:
Diploma or Bachelor's degree in computer science, Information Technology, or relevant industry experience of 4 to 6 years.

Certifications (preferred but not mandatory):
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
Certified Ethical Hacker (CEH)
CompTIA Security+
Certified Information Systems Auditor (CISA)

Roles and Responsibilities
Should have familiarity with O365, Google Workspace, operating systems (Windows, Linux, Unix), and cloud environments and hardening them.
Should be able to work collaboratively with IT teams, management, and external partners.
Coordinate with the IT and security teams to fix and remediate the identified vulnerabilities and threats.
Investigate and document security incidents to understand the root cause and implement corrective actions.
Respond to security breaches and incidents promptly.
Develop, implement, and enforce security policies and procedures.
Ensure compliance with regulatory requirements and industry standards as per ISO/SOC requirements.
Configure and maintain security tools such as firewalls, intrusion detection/prevention systems (IDS/IPS), antivirus software, and encryption tools.
Regularly evaluate and update all the systems and software security patches.
Conduct risk assessments to identify potential security threats and vulnerabilities.
Recommend and implement security measures to mitigate the risks.
Stay informed about the latest security trends, threats, and technological advancements.
Educate employees about security best practices and potential threats.
Conduct security training sessions and awareness programs.
Maintain detailed records of security incidents, actions taken, and resolutions.
Prepare reports for management on the status of security measures and compliance.
Should have a good understanding of encryption and authentication technologies.