Information Security Analyst

About the role

Protect company and customer data by watching for threats, applying security controls, and handling incidents. The role also covers reviews, testing, and keeping systems, services and networks private, intact and available.

What you will do

• Triage and respond to alerts raised by information security monitoring systems
• Escalate alerts that need deeper investigation and carry out threat hunting in log feeds
• Write security policies, procedures and response playbooks and build new alerts and dashboards
• Investigate incidents, find root causes of vulnerabilities and monitor network changes for threats
• Run vulnerability scans, triage findings and conduct security reviews and penetration tests on products

What they look for

• Solid grasp of information security principles and good practice
• Understanding of cloud infrastructure, application security, vulnerability scanning and penetration testing
• Hands on experience with security testing tools and scripts
• Comfort using AI tools for data analysis and application development
• Familiarity with Microsoft Sentinel or Elasticsearch
• Knowledge of secure SaaS setup, APIs, logging, access control and permissions

Nice to have

• A certification such as Security+, GSEC, CompTIA CySA+ or Cisco Cyber Ops
• Experience with SIEM tools, log observability and Azure or AWS
• A degree in information technology or a similar subject
• Familiarity with Docker and containers

Benefits

• Company wide bonuses tied to monthly sales targets
• Referral bonuses for employees
• Adoption assistance
• Tuition and certification reimbursement
• Bonuses for completing certifications