Security Analyst

Key Responsibilities Continuously monitor, analyse, triage and close security events, alerts and requests received from the managed SOC, security systems and users.

Support the Incident Manager and relevant stakeholders in investigating, containing, remediating and recovering from security incidents to minimise business impact.

Enhance SOC detection and response playbooks, develop new incident-response procedures, and maintain clear processes for escalation, communication, evidence collection and documentation.

Use analytical and data-visualisation tools to automate analysis, derive insights from large datasets, correlate information across SIEM and other data sources, and investigate anomalous activity against established baselines to determine root cause.

Apply AI-driven and machine-learning capabilities, where appropriate, to support real-time security investigations, threat triage, containment and remediation, escalating issues when required.

Apply ethical-hacking knowledge to identify potential threats and vulnerabilities and recommend appropriate remediation measures. Perform digital-forensics analysis of security events and alerts while following established evidence-handling and chain-of-custody practices.

Apply reverse-engineering techniques, where required, to understand software behaviour and support malware analysis. Develop security-monitoring reports, metrics and dashboards for asset owners and management.

Stay current with emerging cyber threats, vulnerabilities, attack techniques and industry developments, and translate relevant intelligence into detection and response improvements. Participate in cybersecurity exercises, including cyber-range simulations and business continuity exercises.

Looking for: At least 3+ years of hands-on information-security experience in a SOC analyst, incident-response analyst, incident-handler or comparable role. Strong hands-on cybersecurity experience with enterprise SIEM platforms, such as Google Security Operations