Among information security analysts, AI is already used for a large share of the tasks. Measured exposure for information security analysts: 49% (high).

Share of this job’s tasks that AI is already used for at work, from real usage. It is not a forecast of job loss, and a low number means no use seen yet. Source: Anthropic Economic Index.

Check how this applies to your own job

Skills this job asks for

Say which you have and which you want to build. We use it to match you to jobs like this one.

About the job

A security analyst plays a vital role in protecting the organization’s digital assets, networks, and infrastructure against cyber threats. This candidate will monitor security tools, perform analysis and triage on escalated threats from our external SOC, investigate potential incidents, perform daily threat hunts, and support threat remediation workflows. This role is ideal for a proactive detailed-oriented professional who looks to build a strong foundation in enterprise incident response, threat detection and security posture maintenance.

Key Responsibilities include, but are not limited to other responsibilities as assigned:

Alert Triage and Monitoring

Triage alerts from Microsoft tools, such as Defender XDR, Intune, Purview, and email gateway security solutions

Conduct initial analysis to distinguish genuine security incidents between false positives and benign positives

Escalate P1 alerts to leadership and fellow security analysts in accordance with established SLAs.

Incident Response and Investigations

Execute response playbooks according to NIST SP 800-61/cyber kill chain standards for common threat vectors such as phishing, malware executive, unauthorized access, and compromised accounts

Apply containment measures including isolating affected endpoints, revoking compromised sessions, resetting of credentials, and blocking malicious indicators (IOCs).

Continuous Improvement and Documentation

Contribute to the development and improvement of security awareness training and materials for employees.

Maintain precise, detailed reports of investigation tickets, triage steps and containment actions

Provide feedback to leadership and the external SOC to refine SIEM correlation rules, detection logic, and internal colleagues to reduce alert fatigue.

ServiceDesk Dashboard

Contribute to resolving incident and service request tickets that are assigned to the Cybersecurity team

Qualifications & Skills

Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology is preferred but will ascertain 5+ years hands-on experience in place of a degree

Certifications such as CompTIA Security+, CySA+, CEH (Certified Ethical Hacker) is preferred

Experience with modern EDR solutions (e.g. MS Defender XDR, Crowdstrike, SentinelOne) and SIEM

Familiarity with phishing review workflows and email header analysis

Experience with scripting languages (e.g., Python, PowerShell, Kusto Query Language (KQL) as its advanced threat-hunting) is a plus.

Soft analytical thinking and structured problem-solving abilities under pressure.

Ability to work independently and collaboratively within a team environment.

Clear written and verbal communication for incident documentation and cross-team collaboration.

Passion for continuous learning and keeping up to tactics, techniques, and procedures (TTPs).