Information Security Analyst

Job Description

We are looking for a dedicated Information Security Analyst to join our team, tasked with protecting our organization’s data and IT infrastructure. This role involves monitoring systems, analyzing security incidents, and implementing strategies to safeguard sensitive information. The ideal candidate will be highly proactive, detail-oriented, and skilled in threat assessment and incident response.

Key Responsibilities:

• Threat Detection & Analysis: Continuously monitor security alerts, network traffic, and logs to identify and respond to potential threats or suspicious activities.
• Incident Response & Management: Develop and execute incident response strategies, investigate breaches, conduct forensic analysis, and coordinate remediation efforts.
• Risk & Vulnerability Assessment: Regularly perform vulnerability assessments, penetration tests, and audits to identify security gaps and recommend mitigation strategies.
• Policy Development: Assist in creating, maintaining, and enforcing security policies, standards, and best practices to protect organizational assets.
• Compliance Management: Ensure systems comply with relevant security standards (e.g., NIST, ISO, HIPAA) and support audits to maintain regulatory compliance.
• Security Awareness & Training: Conduct training sessions for employees on topics such as phishing, secure data handling, and access management.
• Access Control Management: Enforce user access control policies and manage permissions to ensure data confidentiality and least-privilege access.
• Documentation & Reporting: Maintain documentation of security incidents, track key metrics, and report insights and trends to leadership.

Required Skills & Qualifications:

• Education: Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or a related field (or equivalent practical experience).
• Experience: Minimum of 2 years in an information security or cybersecurity role.
• Technical Skills:
  • Familiarity with SIEM tools, firewalls, IDS/IPS, and endpoint security solutions.
  • Solid understanding of security frameworks (NIST, ISO 27001) and best practices.
  • Experience with network security, vulnerability management, and data encryption protocols.
  • Proficiency in scripting languages (Python, PowerShell) for automation.
  • Knowledge of cloud security (AWS, Azure, Google Cloud) and related compliance requirements.

Preferred Certifications:

• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• CompTIA Security+
• GIAC Security Essentials (GSEC)

Soft Skills:

• Strong problem-solving and analytical skills.
• Excellent communication skills to explain security concepts to non-technical staff.
• Ability to work independently and as part of a collaborative team.

Benefits:

• Competitive salary and performance-based bonuses.
• Health, dental, and vision insurance.
• Opportunities for professional growth and certification sponsorship.
• Flexible work environment, including remote work options.