Cyber Security Operations & Analyst

Perform Level 2 (L2) Security Operations activities and investigate security alerts and incidents escalated by the Level 1 (L1) team.

Analyze security alerts, suspicious activities, and Indicators of Compromise (IoCs) to identify potential security threats.

Conduct threat hunting activities to identify potential threats and unusual activities within the security environment.

Support Cyber Threat Intelligence (CTI) activities by assessing identified threats and their potential impact on the organization's environment.

Monitor, maintain, and troubleshoot existing security monitoring and protection tools to ensure their availability and operational effectiveness.

Support security log integration and ensure relevant security events are properly collected and monitored.

Assist in Proof of Concept (PoC) activities, evaluation, and implementation of new security tools.

Perform preventive maintenance and troubleshoot operational issues related to security tools and monitoring systems.

Prepare and maintain Security Operations documentation, procedures, operational guidelines, and reports.

Collaborate with security, infrastructure, and application teams to investigate and resolve security-related issues.

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.

1–2 years of experience in Cyber Security, Security Operations Center (SOC), or a related security role.

Basic understanding of security monitoring, incident investigation, incident response, and security operations processes.

Hands-on experience in analyzing security alerts, investigating suspicious activities, and handling security incidents.

Familiarity with threat hunting, Cyber Threat Intelligence (CTI), Indicators of Compromise (IoCs), and security log analysis.

Basic knowledge of SIEM, EDR/XDR, endpoint security, vulnerability assessment, or cloud security.

Familiarity with security tools such as Elastic, Elastic Defend, Microsoft Defender, Cortex XDR, Nessus, Forcepoint, Orca Security, SocRadar, SenhaSegura, Tencent, or similar platforms is an advantage.

Strong analytical thinking, problem-solving, and troubleshooting skills.

Good communication skills and the ability to collaborate effectively with cross-functional teams.

Willingness to learn new security technologies and continuously improve technical capabilities.