Shruti Iyer

Al Masaood

<div>
 
 We are looking for a
 
 Cybersecurity Analyst
 
 to strengthen our Information Security team. This role will focus on threat monitoring, risk assessment, incident response, compliance, and overall improvement of our security posture across on-prem, cloud, and email environments.
 
 
 
 
 
 
 Technical Skills
 
 
 
 
 Security Tools &amp; Platforms
 
 
 <ul>
 <li>
 SIEM platforms (e.g.,
 
 Microsoft Sentinel
 
 ,
 
 Rapid7 InsightIDR
 
 )
 </li>
 <li>
 EDR/XDR tools (e.g.,
 
 Microsoft Defender for Endpoint
 
 ,)
 </li>
 <li>
 SOAR platforms for automated response
 </li>
 <li>
 DLP solutions (e.g., Microsoft Purview)
 </li>
 <li>
 CASB tools (e.g., Microsoft Defender for Cloud Apps)
 </li>
 </ul>
 
 
 Networking &amp; Infrastructure
 
 
 <ul>
 <li>
 Strong understanding of
 
 network protocols
 
 , TCP/IP, DNS, DHCP, etc.
 </li>
 <li>
 Firewall, IDS/IPS, and VPN configuration and monitoring
 </li>
 <li>
 Familiarity with
 
 network segmentation
 
 ,
 
 Zero Trust architecture
 
 </li>
 </ul>
 
 
 Cloud Security
 
 
 <ul>
 <li>
 Securing
 
 Azure
 
 ,
 
 AWS
 
 , or
 
 Google Cloud
 
 environments
 </li>
 <li>
 IAM, cloud encryption, cloud workload protection
 </li>
 <li>
 Monitoring and compliance in SaaS, PaaS, and IaaS
 </li>
 </ul>
 
 
 Forensics &amp; Threat Hunting
 
 
 <ul>
 <li>
 Log analysis and correlation
 </li>
 <li>
 Memory dumps and packet captures
 </li>
 <li>
 Familiarity with tools like
 
 FTK
 
 ,
 
 Wireshark
 
 </li>
 </ul>
 
 
 Email Security
 
 
 <ul>
 <li>
 Anti-phishing and anti-spam tools (Mimecast, Proofpoint, Microsoft Defender for Office 365)
 </li>
 <li>
 Email header analysis and malware sandboxing
 </li>
 <li>
 Email encryption and DLP policy management
 </li>
 </ul>
 
 
 Vulnerability &amp; Penetration Testing
 
 
 <ul>
 <li>
 Vulnerability scanners (e.g., Nessus, Rapid7 InsightVM)
 </li>
 <li>
 Pen testing basics and red team vs blue team methodologies
 </li>
 <li>
 Secure coding awareness (optional if role overlaps with AppSec)
 </li>
 </ul>
 
 
 Compliance &amp; Governance
 
 
 <ul>
 <li>
 ISO 27001, NIST CSF, GDPR, HIPAA understanding
 </li>
 <li>
 Risk assessment frameworks (e.g., FAIR)
 </li>
 <li>
 Policy and audit documentation
 </li>
 </ul>
 
 
 Analytical &amp; Problem-Solving Skills
 
 
 <ul>
 <li>
 Root cause analysis
 </li>
 <li>
 Threat modeling and risk analysis
 </li>
 <li>
 Incident triage and prioritization
 </li>
 </ul>
 
 
 Communication &amp; Soft Skills
 
 
 <ul>
 <li>
 Clear written documentation (e.g., incident reports, SOPs)
 </li>
 <li>
 Ability to explain technical findings to non-technical stakeholders
 </li>
 <li>
 Team collaboration and cross-functional communication
 </li>
 <li>
 Proactive, calm under pressure, and detail-oriented
 </li>
 </ul>
 
 
 Automation &amp; Scripting
 
 
 <ul>
 <li>
 PowerShell or Python for log parsing, scripting, and automation
 </li>
 <li>
 Basic understanding of automation in SOAR or custom playbooks
 </li>
 </ul>
 
 
 
 
 
 
 
 
 
 Candidate Qualification:
 
 
 
 
 &bull; Bachelor's degree in Computer Science, Information Technology, or a related field.
 
 
 &bull; Certifications: Relevant certifications such as CompTIA Security+, CSA, CTIA, CSAP, CISA, CEH, OSCP
 
</div>

Information Technology Security Analyst

Join Al Masaood and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

Al Masaood

ABOUT_COMPANY

Information Technology Security Analyst