Security Analyst

Job Description

Responsibilities

• 1) Technical Skills and Knowledge
• - Act as the organisation's early warning system by continuously observing network traffic, analysing system logs, and managing Security Information and Event Management (SIEM) tools to spot suspicious activities and filter out false alarms before a potential threat escalates.
• - Bridge the gap between technical systems and human behaviour by ensuring the organisation’s adherence to legal frameworks and industry standards (such as NIST CFS), documenting the security posture for leadership, and conducting ongoing training to help employees recognise and avoid common threats such as phishing.
• - Proactively hunt for systemic weaknesses by conducting regular network scanning, coordinating simulated penetration tests, and enforcing rigorous patch management to identify, assess, and prioritise technical risks before malicious actors can exploit them.
• - Build and maintain robust technical defences installing, configuring, and managing essential security infrastructure – including firewalls, endpoint protection (EDR), and strict identity access controls, while ensuring all new IT projects are designed securely from the ground up.
• 2) Policy and Planning
• - Assist and support the Manager, Infrastructure and Cybersecurity Risk to implement and to ensure compliance with all the policies relating to Information Technology.
• 3) Resource Management
• - Establish and maintain materials and equipment storage.
• - Ensure system compatibility, maintenance of the organizations Standard Operating Environment.
• 4) Vendor Relationship Management
• - Specify items required and obtain quotations as necessary.
• - Maintain good relationship with vendors.
• 5) Reports
• - Prepare reports and provide accurate information as and when required by the Management.

Requirements

• - Bachelor’s degree in Information Technology (IT), Computer Science or other related discipline from a recognised institution with at least three (3) years relevant work experience.
• - Master’s degree holder can be considered.
• - Possess at least one (1) relevant IT certification(s) with active status in either system, network, project management, information security, operations, or equivalent. (e.g; CCNA, ITIL, CompTIA Security+, or equivalent)
• - At least three (3) years of relevant working experience in two of the following domains: deployment, configuration, support, cybersecurity, network security, project management in a medium to large enterprise with a proven record of providing quality service.
• - Experience in assisting or performing risk assessment or incident response and management.
• - Familiar with current security technologies and keen interest in learning within security domain.
• - Familiar with support and manage the Endpoint Detection and Responses (EDR/XDR), email security gateway, Firewall, IPS,VPN,DLP,MFA, etc.
• - Handle, validate and investigate Security Events (Intrusions/Malicious Activity/Security Events).
• - Ability to perform the tasks assigned under pressure and short notice. Ready to work outside of normal office hours when required.
• - Ability to handle confidential and sensitive information responsibly.
• - Self-motivated, demonstrating a high level of initiative, assertiveness, versatility and flexibility.
• - Experience in responding to all audit enquires pertaining to IT security matters.
• - Demonstrates up-to-date knowledge of the current cyber security trends, threats, solutions and tools.
• - Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, and common security elements.

Required Skills