Phishing Analyst

Scope of Work:Assist in the identification and analysis of phishing attempts, including email phishing, spear phishing, and whaling, to protect organizational assets and sensitive information.Collaborate with senior cybersecurity team members to enhance phishing detection capabilities and implement protective measures against phishing threats.Participate in the examination of suspicious emails and websites, using tools and techniques to identify malicious content and assess the risk to the organization.Support the response to confirmed phishing incidents, including recommending actions to mitigate damage and prevent future occurrences, under guidance from experienced analysts.Contribute to the development and maintenance of a phishing incident database, documenting attack vectors, tactics, and indicators of compromise for future reference.Engage in security awareness initiatives, helping to design and deliver training sessions focused on phishing recognition and response for employees across the organization.Work closely with the IT department to ensure the proper configuration of email filters, web proxies, and other security tools to reduce the risk of phishing attacks.Assist in the continuous improvement of phishing defense strategies by staying informed about the latest phishing techniques and countermeasures.Participate in the creation and updating of standard operating procedures (SOPs) for phishing incident detection, analysis, and response.Support cross-functional teams during security audits and assessments by providing insights and data on phishing threats and organizational readiness.

Skills:Basic understanding of cybersecurity and phishing tacticsFamiliarity with email systems, security tools, and incident response processesAnalytical skills for evaluating suspicious emails and web contentAttention to detail and ability to recognize indicators of phishing attemptsEffective communication skills for reporting findings and contributing to security awareness

Certification (Optional but beneficial):CompTIA Security+

---