Cyber Security Operations & Analyst

• Perform Level 2 (L2) Security Operations activities and investigate security alerts and incidents escalated by the Level 1 (L1) team.

• Analyze security alerts, suspicious activities, and Indicators of Compromise (IoCs) to identify potential security threats.

• Conduct threat hunting activities to identify potential threats and unusual activities within the security environment.

• Support Cyber Threat Intelligence (CTI) activities by assessing identified threats and their potential impact on the organization's environment.

• Monitor, maintain, and troubleshoot existing security monitoring and protection tools to ensure their availability and operational effectiveness.

• Support security log integration and ensure relevant security events are properly collected and monitored.

• Assist in Proof of Concept (PoC) activities, evaluation, and implementation of new security tools.

• Perform preventive maintenance and troubleshoot operational issues related to security tools and monitoring systems.

• Prepare and maintain Security Operations documentation, procedures, operational guidelines, and reports.

• Collaborate with security, infrastructure, and application teams to investigate and resolve security-related issues.

-
Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.

-
1–2 years of experience in Cyber Security, Security Operations Center (SOC), or a related security role.

-
Basic understanding of security monitoring, incident investigation, incident response, and security operations processes.

-
Hands-on experience in analyzing security alerts, investigating suspicious activities, and handling security incidents.

-
Familiarity with threat hunting, Cyber Threat Intelligence (CTI), Indicators of Compromise (IoCs), and security log analysis.

-
Basic knowledge of SIEM, EDR/XDR, endpoint security, vulnerability assessment, or cloud security.

-
Familiarity with security tools such as Elastic, Elastic Defend, Microsoft Defender, Cortex XDR, Nessus, Forcepoint, Orca Security, SocRadar, SenhaSegura, Tencent, or similar platforms is an advantage.

-
Strong analytical thinking, problem-solving, and troubleshooting skills.

-
Good communication skills and the ability to collaborate effectively with cross-functional teams.

-
Willingness to learn new security technologies and continuously improve technical capabilities.