Security Analyst

Role & responsibilities

• Manage and oversee the operation of security solutions, including SIEM, Endpoint Security, Inventory Management, Patch Management, and Vulnerability Management systems.
• Continuously monitor security incidents and provide regular updates and findings to the Chief Information Security Officer (CISO).
• Oversee patch management processes, including the approval and resolution of patch-related issues.
• Provide L3 support and conduct monitoring for security-related activities.
• Deploy and enforce security policies, controls, and solutions across the organization.
• Administer and resolve security incidents in a timely and effective manner.
• Ensure ongoing compliance within the ICT environment through continuous monitoring.
• Supervise regular internal audits to ensure adherence to security policies.
• Present audit findings and provide resolutions, including relevant use cases.
• Collaborate with business teams to align security controls with operational needs, offering tailored security solutions.

Required Skills and Experience:

• Strong hands-on experience in CVE and vulnerability management.
• Proficient in patch management and asset management processes.
• Familiarity with security tools such as KALI, OWASP, BlackArch, and experience in security audits, vulnerability assessments, and mitigation techniques.
• Solid problem-solving abilities with a keen interest in staying updated with new technologies.

Experience: 8-13 years in the IT and security field, with at least 4+ years in compliance, security control deployment, vulnerability management, and incident analytics.

Qualifications:

A Bachelors degree in Information and Communication Technology (ICT) or a related field, or an equivalent qualification.

Certifications:

• Industry-recognized security certifications (e.g., CEH, Security+, CISA) are highly desirable.

Essential Requirements:

• Expertise in managing firewall operations and network security, including perimeter security, routing, switching, protocols, LAN/WAN, NAT, PAT, and other related technologies.
• Experience working with SIEM, EDR, Proxy, IPS/IDS, Routers, Switches, Firewalls, DLP, MDM, Windows Servers, and Network Architecture.