security analyst

UDHC Lahore

<p><b>Job Title: </b>IT Security Analyst</p><p><b>Location: </b>[Lahore] On Site</p><p><b>Department: </b>Infrastructure / Operations</p><p><b>Reports To: </b>Infrastructure Manager / IT Operations</p><p>We are hiring an IT Security Analyst to help protect our healthcare technology platforms and infrastructure. The ideal candidate should have experience in cybersecurity, vulnerability management, incident response, and security monitoring. Knowledge of healthcare compliance and cloud security is preferred. Bachelor&rsquo;s degree in computer science, Cybersecurity, IT, or related field in a must. A certification like CompTIA Security+, CEH, CISSP, CISM is highly desirable. We expect the IT Security Analyst to lead the activities in acquiring and maintaining various licenses and certifications like HIPAA and SOC 2. Ideal candidate must have 2+ years of experience in cybersecurity or IT security.</p><p><b>Key Responsibilities:</b></p><p>Security and Vulnerability Monitoring</p><ul><li>Monitor security alerts, logs, and suspicious activities using SIEM tools.</li><li>Investigate security incidents, threats, and breaches.</li><li>Perform incident response activities including containment, eradication, and recovery.</li><li>Document incidents and prepare incident reports and track fixes.</li><li>Conduct vulnerability assessments and security scans.</li><li>Identify security weaknesses in systems, servers, networks, and applications.</li><li>Coordinate remediation efforts with IT teams.</li></ul><p>Security Operations:</p><ul><li>Manage endpoint protection, antivirus, firewall, and access controls.</li><li>Monitor user access and privilege management.</li><li>Ensure secure configuration of systems and devices.</li><li>Review, maintain and suggest updates in security policies and procedures.</li><li>Participate and lead in security audits and assessments.</li></ul><p>Threat Detection, Prevention and Awareness:</p><ul><li>Analyze emerging cyber threats and attack patterns.</li><li>Implement preventive security measures.</li><li>Assist in phishing analysis and malware investigations.</li><li>Conduct threat intelligence reviews.</li><li>Support employee security awareness training.</li><li>Assist in phishing simulations and awareness campaigns.</li></ul><p>Technical Skills Required:</p><ul><li>SIEM tools (Splunk, QRadar, Sentinel)</li><li>Endpoint security solutions</li><li>Firewalls and IDS/IPS systems</li><li>Vulnerability scanning tools (Nessus, Qualys)</li></ul><p>Send your CVs at resume@udhc.net</p><p>Work Location: In person</p>

IT Security Analyst

Capgemini

<p></p><div><div><div><div><div>Wilmington, DE, United States (On-site)</div></div><div></div><div><div>
Contract (5 months 21 days)</div></div><div></div><div><div>
Published 4 days ago</div></div></div><div><div><div>
stakeholder management</div></div><div><div>
Security Operations</div></div><div><div>
cyber security</div></div><div><div>
Security Monitoring Tools</div></div><div><div>
risk management</div></div><div><div>
gap analysis</div></div><div><div>
problem - solving analytical skills</div></div><div><div>
Secure Development Lifecycle (SDLC)</div></div></div><div><div><ul><li><p>
This is a contract position for a Cyber Security Analyst that will be part of the CISO function and will support Clients US Consumer Banking Business with the acquisition of Best Egg.
</p></li><li><p>The role will support Best Egg Integration and will be responsible to work on the legal day 1 and beyond Cyber deliverables for the Project that includes, completion of the gap analysis against Clients standards, alignment with Clients tech and cyber policies and standards and determine and co-ordinate post legal day 1 integration and control enhancements/deliverables.
</p></li><li><p>This will include requirements related to penetration testing, third party security, data security, vulnerability management, secure configuration, and other cyber domains.
</p></li><li><p>Additionally, the role will support the Business Information Security Office with governance activities for Best Egg Cyber function in the first year.</p></li></ul><p><b><br>
Key Accountabilities:</b></p><ul><li><p>
Support gap assessment against Clients Cyber policies and standards and help define remediation plans to address the gaps</p></li><li><p>
Ensure gaps and risks are recorded as per Clients governance framework and are tracked to closure.</p></li><li><p>
Co-ordination of penetration testing of Best Egg networks and applications, and security reviews related to third party security, data security, vulnerability management, secure configuration, and other cyber domains.</p></li><li><p>
Support Cyber Security activities and other related activities to ensure the organization's assets and IT systems are appropriately protected against unauthorized activities including deliberate or accidental loss.</p></li><li><p>
Execution of security risk assessments during the change &amp; development lifecycle to identify vulnerabilities within Best Egg systems, applications and infrastructure, ensuring compensating security controls and countermeasures are embedded to enhance security posture and resilience against cyber threats.</p></li><li><p>
Support and provide guidance to Chief Information Security Office (CISO), Business information Security Office (BISO), Chief Information Office (CIO) and Product Team functions providing security reviews and recommendations for risk mitigation.</p></li><li><p>
Contribute to the design of security solutions</p></li><li><p>
Work with the business and project team(s) to ensure residual risks are adequately mitigated to the degree that meets the risk appetite of the business.</p></li><li><p>
Handling complex information. 'Complex' information could include sensitive information.</p></li><li><p>
Influence or convince stakeholders to achieve outcomes.</p></li></ul><p><b><br>
Person/Skillset Specification:</b></p><ul><li><p>
Has 5 to 7 years of experience in cyber and information security domain preferably in CISO or Security consultancy roles</p></li><li><p>
Broad domain expertise across network security, cloud, IAM, data protection, application security, third-party security and artificial intelligence.</p></li><li><p>
Understanding of security strategies and technologies including secure network design, e-Channels, remote computing, desktop and server hardening, secure web services, Compliance Auditing, Penetration Testing, Security Monitoring, Access Controls (identification, authentication and authorization) and Encryption.</p></li><li><p>
Expertise in Technology and cyber standards and control framework and experience performing gap assessments against these framework as well as recommending risk mitigation measures.</p></li><li><p>
Working knowledge of NIST CSF, ISO/IEC 27001/27002, PCI DSS/PED and CIS Controls, and their application into diverse environments.</p></li><li><p>
Understanding of the security mechanisms associated with Windows or Unix operating systems, switched networks, web based applications and databases.</p></li><li><p>
Competent to discuss the underlying technology with product developers.</p></li><li><p>
Contribute to formulation of controls and best practices for security management.</p></li><li><p>
Can describe all key Cyber Security functions, major roles, responsibilities and their inter-dependencies.</p></li><li><p>
Has contributed to the creation of technology-related security best practices and processes.</p></li><li><p>
Understands security operations from a people, process and technology perspective.</p></li><li><p>
Understands routine Cyber Security monitoring and administration tools.</p></li></ul><p><b><br>
Risk and Control Objective:</b></p><ul><li><p>
Ensure that all activities and duties are carried out in full compliance with regulatory requirements, Enterprise Wide Risk Management Framework and internal Clients Policies and Policy Standards</p></li></ul><p></p><p><br>
The pay range that the employer in good faith reasonably expects to pay for this position is $36.98/hour - $57.79/hour. Our benefits include medical, dental, vision and retirement benefits. Applications will be accepted on an ongoing basis.
</p><p></p><p>Tundra Technical Solutions is among North America&rsquo;s leading providers of Staffing and Consulting Services. Our success and our clients&rsquo; success are built on a foundation of service excellence. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Unincorporated LA County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: client provided property, including hardware (both of which may include data) entrusted to you from theft, loss or damage; return all portable client computer hardware in your possession (including the data contained therein) upon completion of the assignment, and; maintain the confidentiality of client proprietary, confidential, or non-public information. In addition, job duties require access to secure and protected client information technology systems and related data security obligations.</p></div></div></div></div><p></p>

Cyber Security Analyst

ATSG

<div><p><b>Information Security Analyst</b></p>
<p><b>
What you will do:
</b></p><p>The Information Security Analyst will assist in the development of a NIST 800-171 / CMMC Cybersecurity policy, system security plans, perform GAP Analysis and recommend security enhancements to management and I.T. staff. This person will coordinate activities related to remediation of findings from vulnerability scans, penetration testing, security, and risk assessments, and in many cases remediate vulnerabilities within the network. Will serve as liaison to 3rd party security managed services and be an internal subject matter expert and/or project lead for all current and future cyber security initiatives. In cooperation with System Administrators, this position will play a hands-on role in working with technology to secure computer and network systems, including but not limited to installing SSL certs, Antivirus, Active Directory, Vulnerability Scanners, Phishing simulations, and analyzing the impact of system configuration changes, software/hardware installations and the latest common vulnerabilities and exposures. This position reports to the Manager of Systems Administration.</p>
<p><b>
What you need:</b></p>
<ul>
<li>Bachelor&rsquo;s degree in computer science, technology, or equivalent experience</li>
<li>Knowledge or networks; TCP/IP, DNS, Firewalls, Windows and Linux Servers, VMWare, Nutanix, Active Directory, MFA and Encryption</li>
<li>Excellent planning and organizational skills</li>
<li>Strong written and verbal communication skills</li>
<li>Ability to work independently and as part of a team</li>
</ul>
<p><b>Preferred Skills</b></p>
<ul>
<li>Certification such as Security +, CISSP, CEH are a plus</li>
<li>Experience with NIST, CMMC and Sox requirements are a plus</li>
<li>Experience with anti-virus, threat analysis and security testing tools are a plus</li>
<li>Ability to contribute to DR planning a plus</li></ul></div>

ATSG IS SECURITY ANALYST

Cybertron Labs

<p>Cybertron Labs</p><p>Protect critical systems and play a key role in defending digital infrastructure against evolving cyber threats. At Cybertron Labs, you will monitor security systems, identify vulnerabilities, and respond to incidents to keep networks and data secure.</p><p>This is a strong opportunity for a detail-oriented cybersecurity professional who enjoys threat analysis, problem-solving, and working with modern security tools in a fast-paced technology environment.</p><p>Salary &amp; Benefits</p><ul><li>Competitive monthly salary: QAR 9,000 &ndash; 15,000 (based on experience)</li><li>Performance-based bonuses</li><li>Health insurance coverage</li><li>Paid annual leave and public holidays</li><li>Flexible or hybrid work options (based on role requirements)</li><li>Training and certification support (CEH, CISSP, Security+)</li><li>Career growth into senior cybersecurity or security architecture roles</li></ul><p>Work Schedule</p><ul><li>Full-time position</li><li>8 hours per day</li><li>5 days per week</li><li>On-call support for security incidents and escalations</li></ul><p>Key Responsibilities</p><ul><li>Monitor security systems and network activity for threats</li><li>Identify vulnerabilities and recommend mitigation strategies</li><li>Respond to security incidents and perform root cause analysis</li><li>Conduct regular security assessments and risk analysis</li><li>Implement and maintain security tools and controls</li><li>Review logs, alerts, and intrusion detection systems</li><li>Support compliance with security policies and standards</li><li>Perform penetration testing and security testing (as required)</li><li>Collaborate with IT teams to strengthen system security</li><li>Maintain security documentation and incident reports</li></ul><p>Skills for This Role</p><ul><li>Strong knowledge of cybersecurity principles and practices</li><li>Experience with SIEM tools and security monitoring systems</li><li>Network security and firewall management</li><li>Threat detection and incident response skills</li><li>Vulnerability assessment and penetration testing</li><li>Knowledge of security frameworks and compliance standards</li><li>Analytical and problem-solving abilities</li><li>Familiarity with operating systems and networking</li><li>Scripting or automation skills (Python, Bash) is an advantage</li><li>Communication and reporting skills</li></ul><p>Requirements</p><ul><li>Bachelor&rsquo;s degree in Cybersecurity, IT, Computer Science, or related field</li><li>Proven experience in IT security or cybersecurity roles</li><li>Strong understanding of network and system security</li><li>Experience with security tools and monitoring platforms</li><li>Relevant certifications (CEH, CISSP, Security+) are an advantage</li><li>Ability to work in a high-pressure, fast-paced environment</li></ul><p>About the Company</p><p>Cybertron Labs is a technology and cybersecurity company in Qatar specializing in protecting digital assets, securing networks, and providing advanced IT security solutions for businesses across industries.</p><p>Why Work With Us</p><ul><li>Work with advanced cybersecurity tools and technologies</li><li>Exposure to real-world security threats and solutions</li><li>Strong focus on training and professional certifications</li><li>Career growth in cybersecurity and IT security leadership</li><li>Collaborative and innovation-driven work environment</li></ul><p>Ready to Apply?</p><p>If you are passionate about cybersecurity and ready to protect critical systems, apply today.</p><p>نوع الوظيفة: دوام كامل, دائم</p><p>الراتب المدفوع: QAR٩٬٠٠٠٫٠٠&nbsp;لكل شهر</p><p>موقع العمل: بشكل شخصي</p>

Alignerr

<div>
 <strong>
  AI / Emerging Tech Security Analyst (AI Training)
  <br/>
  <br/>
 </strong>
 <strong>
  About The Role
  <br/>
  <br/>
 </strong>
 What if your security expertise could directly shape how the world's most powerful AI systems defend themselves against attack? We're looking for AI Security Analysts to probe, stress-test, and evaluate frontier AI models &mdash; identifying how they can be manipulated, misused, or pushed beyond their intended boundaries before those vulnerabilities cause real-world harm.
 <br/>
 <br/>
 This is a fully remote, flexible contract role for security professionals who are curious about AI and want to work at the cutting edge of both fields. If you think in threat models, love finding what breaks, and want your work to matter &mdash; this is the role for you.
 <br/>
 <br/>
 <ul>
  <li>
   Organization: Alignerr
  </li>
  <li>
   Type: Hourly Contract
  </li>
  <li>
   Location: Remote
  </li>
  <li>
   Commitment: 10&ndash;40 hours/week
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What You'll Do
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Analyze AI and LLM security scenarios to understand how models behave under adversarial or unexpected conditions
  </li>
  <li>
   Review and evaluate cases involving prompt injection, data leakage, model abuse, and system misuse
  </li>
  <li>
   Classify security vulnerabilities and recommend appropriate mitigations based on real-world impact and likelihood
  </li>
  <li>
   Apply threat modeling frameworks to emerging AI technologies and deployment contexts
  </li>
  <li>
   Help evaluate and improve AI system behavior so it remains safe, reliable, and aligned with security best practices
  </li>
  <li>
   Work independently and asynchronously on task-based assignments at your own pace
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Who You Are
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Background in cybersecurity, information security, or a closely related field
  </li>
  <li>
   Strong understanding of security threat modeling applied to modern software systems
  </li>
  <li>
   Genuinely curious about how AI systems are built, deployed, and potentially exploited
  </li>
  <li>
   Analytical and precise &mdash; you approach complex systems methodically and don't miss edge cases
  </li>
  <li>
   Clear written communicator who can document findings and reasoning with structure and confidence
  </li>
  <li>
   Self-motivated and reliable when working independently without supervision
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Nice to Have
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Hands-on experience with penetration testing, red teaming, or vulnerability research
  </li>
  <li>
   Familiarity with large language models (LLMs), AI APIs, or prompt engineering concepts
  </li>
  <li>
   Background in application security, cloud security, or API security
  </li>
  <li>
   Experience with adversarial machine learning or AI safety concepts
  </li>
  <li>
   Certifications such as OSCP, CEH, CISSP, or equivalent practical experience
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Why Join Us
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Work directly on frontier AI systems alongside the world's leading AI research labs
  </li>
  <li>
   Fully remote and flexible &mdash; work when and where it suits you
  </li>
  <li>
   Freelance autonomy with the structure of meaningful, high-stakes work
  </li>
  <li>
   Be at the forefront of an entirely new discipline &mdash; AI security is one of the most important emerging fields in tech
  </li>
  <li>
   Potential for ongoing work and contract extension as new projects launch
  </li>
 </ul>
</div>


AI / Emerging Tech Security Analyst

Commercial Bank of Dubai

<div>Dubai, Dubai, AE Management Permanent ID: 100251</div>
<br><div><div><div><div><h3 class="jobSectionHeader"><b>DESCRIPTION</b></h3>
<div><p><b>Job Purpose:</b></p><p>
The role is responsible for monitoring, analysing, and responding to security events and incidents to ensure timely detection and containment of threats. It ensures the effective implementation and continuous improvement of security controls aligned with regulatory requirements, industry standards, and organizational policies. The Senior IT Security Analyst supports vulnerability management, threat intelligence, and risk assessments to strengthen the overall security posture. The role collaborates closely with IT, business, and third‑party stakeholders to embed security best practices across systems, applications, and processes. It provides expert guidance during security investigations, audits, and regulatory inspections, ensuring accurate reporting and compliance. The position contributes to security architecture reviews, change management, and project initiatives to ensure security-by-design principles are applied.</p><p><b>
Principal Accountabilities:</b></p><ul><li>
Monitor, analyze, and investigate security events and alerts using SIEM, EDR, NDR, and other security platforms.</li><li>
Lead incident response activities, including containment, eradication, root cause analysis, and post‑incident reporting.</li><li>
Perform vulnerability assessments and coordinate remediation activities with infrastructure, application, and operations teams.</li><li>
Conduct regular security risk assessments and support risk treatment plans aligned with business objectives.</li><li>
Ensure implementation and effectiveness of security controls in line with ISO 27001, NIST, PCI DSS, and regulatory requirements.</li><li>
Support internal, external, and regulatory audits by providing evidence, explanations, and corrective action tracking.</li><li>
Analyze threat intelligence feeds and emerging cyber threats to proactively enhance detection and prevention capabilities.</li><li>
Review security architecture, system designs, and change requests to ensure security‑by‑design principles are applied.</li><li>
Manage and tune security tools and technologies to improve detection accuracy and reduce false positives.</li><li>
Coordinate with SOC, IT operations, and third‑party service providers on security monitoring and incident handling (as Level 3).</li><li>
Develop and maintain security procedures, playbooks, and standard operating procedures (SOPs).</li><li>
Support data protection and information classification initiatives, including security monitoring and incident handling.</li><li>
Perform periodic access reviews, privileged access monitoring, and support identity and access management controls.</li><li>
Track, report, and trend security metrics, incidents, and risk indicators for management and governance forums.</li><li>
Support business continuity, disaster recovery, and cyber resilience planning from a security perspective.</li><li>
Provide security guidance and awareness to IT and business teams to promote secure practices.</li></ul></div></div></div></div></div>
<br><div><div><div><div><h3 class="jobSectionHeader"><b>REQUIREMENTS</b></h3>
<div><p><b>Education and Experience</b></p><ul><li>
Bachelor&rsquo;s degree in computer science, Information Technology, Information Systems, or related discipline.</li><li>
Equivalent professional experience may be considered in lieu of formal education where applicable.</li><li>
CISSP, CISM, CISA, or equivalent internationally recognized cyber security certification.</li><li>
Vendor‑specific security certifications (e.g., EDR, SIEM, Firewall, Cloud Security) are highly desirable.</li><li>
Minimum 5&ndash;8 years of hands‑on experience in IT Security Operations, Cyber Security, or Information Security roles.</li></ul></div></div></div></div></div><p></p>

Senior IT Security Analyst ( UAE National )

Agility

<div>
 <p>
  <strong>
   Role Summary:
  </strong>
 </p>
 <p>
  We are seeking a highly experienced and results-driven&nbsp;Senior Information Security Analyst&nbsp;to serve as our entral&nbsp;Governance, Risk, and Compliance (GRC) resource. This is a pivotal role responsible for the overall design, maintenance, and enhancement of the organization's security and resilience frameworks. The core purpose of this position is to ensure continuous compliance with all relevant international and local standards, with a specific focus on leading our audit readiness and certification efforts.
 </p>
 <p>
  <strong>
   Your Responsibilities:
  </strong>
 </p>
 <p>
  &nbsp;Compliance and GRC Management
 </p>
 <ul>
  <li>
   &nbsp;Establish, maintain, and enhance the organization's Information Security Management System (ISMS) and Business Continuity &amp; Supply Chain Management (BCSM) frameworks
  </li>
 </ul>
 <ul>
  <li>
   Ensure the organization's compliance with all relevant local, regional, and international regulations and standards, ISO 27001, ISO 22301)
  </li>
  <li>
   Act as the primary auditee and point of contact for all internal and external information security audits
  </li>
  <li>
   Proactively identify, assess, and manage information security and business continuity risks to protect the organization's information assets
  </li>
  <li>
   Drive a culture of security and resilience across the organization
  </li>
 </ul>
 <p>
  &nbsp;Security Controls &amp; Technical Oversight
 </p>
 <ul>
  <li>
   &nbsp;Conduct security assessments and audits of various IT platforms, including cloud infrastructure , on-premise servers (Windows, Linux), databases, and network devices.
  </li>
 </ul>
 <ul>
  <li>
   Utilize or interpret reports from vulnerability scanners and penetration testing tools to identify and prioritize security weaknesses
  </li>
  <li>
   Evaluate and enforce robust Identity and Access Management (IAM) controls, including role-based access control (RBAC) and multi-factor authentication (MFA)
  </li>
  <li>
   Review and ensure the security of cloud deployments (IaaS, PaaS, SaaS), including security groups, IAM policies, and logging
  </li>
  <li>
   Apply strong knowledge of secure configuration baselines and hardening standards (CIS Benchmarks) for operating systems, web servers, and network equipment
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements
  <br/>
  <br/>
 </strong>
 <p>
  <strong>
   Your Qualifications:
  </strong>
 </p>
 <ul>
  <li>
   Education: Candidate must possess at least a Bachelor of Science or Bachelor of Computer Application
  </li>
 </ul>
 <ul>
  <li>
   Experience: A minimum of 5 - 10 years of experience in a similar environment
  </li>
  <li>
   Domain: Experience in Government Sector or Private Sector with Enterprise data Center Security Compliance
  </li>
  <li>
   Certifications: Essential certifications include ISO 27001, ISO 22301, CISSP, and CISA
  </li>
  <li>
   Language: Must be fluent in English, with Arabic as an added advantage.
   <br/>
  </li>
 </ul>
 <p>
  <strong>
   Your Competencies:
  </strong>
 </p>
 <p>
  Technical:
 </p>
 <ul>
  <li>
   Security Frameworks &amp; Standards: Profound knowledge of ISO 27001, NIST, and CIS
  </li>
  <li>
   Security Controls: A solid understanding of network security (Firewalls, IDS/IPS), Endpoint Security (EDR), IAM principles, and Cryptography
  </li>
  <li>
   Tools: Practical experience with Vulnerability and Risk Assessment Tools  and familiarity with SIEM platforms
  </li>
  <li>
   Software Proficiency: Experience with GRC Platforms and documentation tools (Microsoft Office Suite, SharePoint, Jira, Confluence)
  </li>
 </ul>
 <p>
  &nbsp;Behavioral:
 </p>
 <ul>
  <li>
   Teamwork and Collaboration
  </li>
  <li>
   Quality and Results focused
  </li>
  <li>
   Learning Agility
  </li>
  <li>
   Business Acumen
  </li>
  <li>
   Decision Making
  </li>
  <li>
   Digital Savvy
  </li>
  <li>
   Agility and Adaptability
  </li>
  <li>
   Negotiation and influence
  </li>
  <li>
   Planning and Organizing
  </li>
 </ul>
</div>


Senior Information Security Analyst - Compliance & GRC

Search 6952+ Security analyst jobs near you this May. New roles added regularly across leading industries. Apply today.

6952 security analyst jobs Near Me

IT Security Analyst

Cyber Security Analyst

ATSG IS SECURITY ANALYST

IT Security Analyst

AI / Emerging Tech Security Analyst

Senior IT Security Analyst ( UAE National )

Senior Information Security Analyst - Compliance & GRC