security operations analyst

Lenovo

<div>
 
 PFB the JD:
 
 
 
 
 
 Job Description
 
 
 
 
 Security Operations Centre (SOC) Analyst plays a vital role in Security delivery. As a SOC Analyst Level 3, you will be on the front line of Cyber Defense, detecting &amp; responding to Cyber Incidents as they happen. You will work with other team members to provide situational awareness through detection, containment, and remediation of IT threats. This job requires great attention to detail and general awareness of Cyber Security tools like SIEM, XDR, EDR, IDS/ IPS, ability understand various logs - network logs, sys logs, Firewall logs. As a SOC Analyst you are expected to have working knowledge in areas of networking, malware analysis, incident response, vulnerability management.
 
 
 * Threat &amp; vulnerability analysis
 
 
 * Investigate, document &amp; report Information security issues &amp; emerging trends
 
 
 * Analysis &amp; response to unknown vulnerabilities
 
 
 
 
 
 
 Responsibilities
 
 
 
 
 As a SOC Analyst - Level 3, you will:
 
 
 * Operate as detection and security incident response subject-matter expert
 
 
 * Technical subject-matter expert in SOC/ SIEM and supporting technologies (EDR, UEBA, etc.) to develop custom queries (e.g., KQL) and playbooks for the SOC analysts to utilize in their investigations.
 
 
 * Align and maintain detection capability to the Mitre attack framework.
 
 
 * Perform root cause analysis of detection failures, identify areas for improvement.
 
 
 * Drive the continuous development of detection capability for SOC
 
 
 * Manage, investigate, and resolve complex issues with the Security tooling.
 
 
 * Securely configure the SIEM, and other SOC solutions in accordance with relevant policy and regulation
 
 
 * Support the Threat hunters in executing complex data analysis.
 
 
 * Provide a point of escalation for SOC/ security detection technical service issues.
 
 
 * Ensure the relevant security tools are compliant with company standards and governance.
 
 
 * Contribute to existing Policy, procedures and process documentation enhancements
 
 
 * Define and implement technical governance processes for security tooling of SOC, SIEM and other security tools including AV, EDR, Defender Cloud.
 
 
 * Create and review detection technology high and low level designs.
 
 
 * Propose and identify automation opportunities resulting from incidents;
 
 
 * Provide recommendations to the Client team, on how to mitigate or avert the occurrence of any suspicious activity within their environment.
 
 
 * Provide In depth analysis to the user/customer about the security incidents (eg. Phishing attack)
 
 
 * Troubleshoot connector/ logger/ Manager for log retrievals
 
 
 
 
 * Prepare SOC Management Reports.
 
 
 * Analyzing &amp; preparing daily and monthly reports based on the devices which are being monitored
 
 
 * Creating Reports and Dashboards based on the customer requirement.
 
 
 * Creating Queries for the Rules requested by client for real time alerts.
 
 
 * Creating Reports which helps in providing the logs for the alerts, for finding any possible threats.
 
 
 
 
 * Analyze a variety of network and host-based security appliance logs (Firewalls, NIDS, HIDS, Sys Logs, etc.) to determine the correct remediation actions and escalation paths.
 
 
 * Independently follow procedures to contain, analyze, and eradicate malicious activity.
 
 
 
 
 * Change Management/ Implementation: Independently implement changes to meet customer infrastructure needs within area of technical responsibility
 
 
 * Patch and Security Management: Apply patch and security changes per policy.
 
 
 * Configuration Management: Review Configuration Management Database (CMDB) entries to ensure they are complete and accurate.
 
 
 * Quality: Provide continual improvement recommendations for direct responsibility area (process improvement, technical standard updates, etc).
 
 
 * Project Management: Lead &amp; participate in customer and internal projects, including transformation.
 
 
 * Customer Relationship Management: Set expectations with customers and/or internal businesses/end users within defined parameters.
 
 
 * Teamwork: Work as part of a team, which may be virtual and/or global. Participate as part of a team and maintains good relationships with team members and customers
 
 
 
 
 
 
 Skill
 
 
 
 
 8 - 12 years of relevant experience
 
 
 
 
 Typical skills include:
 
 
 * Fine-tune SIEM and other SOC tooling to exclude noise and false positives
 
 
 * Create and fine-tune content in SIEM - correlation rules, Dashboard and Reports etc
 
 
 * Interact with SIEM, EDR and NDR vendors (TAC Support) to remediate any issues with tooling
 
 
 * Evaluate new solutions for SOC
 
 
 * Identify opportunities to improve overall capacity, playbook and runbook
 
 
 * Understanding of threat landscapes and threat modelling, security threat and vulnerability management, and security monitoring
 
 
 * Working knowledge of tools and techniques used by attackers to gain entry into corporate networks, including common IT system flaws and vulnerabilities.
 
 
 * Knowledge of industry standards such as ISO 27001, HIPAA, FedRAMP, Cloud Security Alliance, NIST frameworks and risk methodologies
 
 
 * Demonstrated experience in communicating complex security concepts, both verbally and in writing, to a variety of audiences
 
 
 * Must take ownership of tasks and demonstrate high degree of autonomy to ensure completion
 
 
 * Excellent understanding of related technologies (Networking, Operating Systems)
 
 
 * General Project Management (Expert)
 
 
 * Customer/Vendor Management (IExpert)
 
 
 * Business Analysis (Expert)
 
 
 * Has ability to perform/drive resolution of problems on individual products.
 
 
 * Able to communicate broad and specific concepts with team and to peers.
 
 
 * Able to produce documentation for use by team and customer.
 
 
 * Able to perform/drive resolution of problems on combinations and interactions of products
 
 
 * Strong verbal &amp; written communication skills
 
 
 * Proactive approach to meet &amp; exceed goals
 
 
 
 
 
 
 Qualification &amp; Experience
 
 
 
 
 Bachelor&rsquo;s degree in engineering (Electronics, Communication, Computer Science)
 
 
 
 
 8 - 12 years of relevant experience in SOC domain
 
 
 
 
 Strong understanding ITIL process
 
 
 
 
 Recognized Cyber Security certifications, such as CISSP, CISM, SANS, SABSA, OSCP are advantageous.
 
 
 
 
 Microsoft Security and compliance certifications such as SC-200, MS-500 and AZ-500 preferred
 
 
 
</div>

Security Operations Center Analyst

<div><h1 class="jobSectionHeader">Job Description &ndash; Security Analyst (GSOC &ndash; Physical Security Focus)</h1>

Employer: G4S Secure Solutions India Pvt. Ltd. 

Location: Various Client Sites &ndash; South Zone (Hyderabad, Bengaluru, Chennai, and others as required) 

Employment Type: Full-Time, Permanent 

Payroll: G4S Secure Solutions India Pvt. Ltd. 

Reporting To: GSOC Supervisor / GSOC Manager 


<h3 class="jobSectionHeader">Role Overview</h3>

We are seeking a vigilant and detail-oriented Security Analyst to join our Global Security Operations Centre (GSOC) team. The role focuses on physical security intelligence, ensuring real-time monitoring of threats, timely escalation of incidents, and proactive risk assessment for client operations across South India. The ideal candidate will combine sharp situational awareness with strong analytical skills to safeguard people, assets, and business continuity. 


<h3 class="jobSectionHeader">Key Responsibilities</h3>

1. Threat Monitoring &amp; Real-Time Surveillance
<ul><li>
Continuously monitor CCTV, access control, alarm systems, and other physical security feeds.</li> 
<li>
Use integrated platforms such as Genetec, Everbridge, Ontic, and ServiceNow for situational awareness.</li> 
<li>
Detect and flag anomalies, suspicious activity, or potential security risks in real time.</li></ul> 


2. Incident Detection, Response &amp; Escalation
<ul><li>
Act as the first point of analysis for incidents and follow GSOC escalation protocols.</li> 
<li>
Document, classify, and escalate security events to the appropriate stakeholders.</li> 
<li>
Support ground teams and law enforcement coordination during emergencies.</li></ul> 


3. Security Intelligence &amp; Reporting
<ul><li>
Track local and regional developments (crime, political unrest, natural disasters) and assess potential impacts.</li> 
<li>
Generate daily, weekly, and monthly reports, including incident summaries, threat advisories, and trend analysis.</li> 
<li>
Provide intelligence-based recommendations to strengthen client security posture.</li></ul> 


4. Emergency &amp; Crisis Support
<ul><li>
Assist during emergency operations (fire, evacuation, lockdown, medical emergencies).</li> 
<li>
Maintain composure under pressure and ensure accurate information flow during critical events.</li> 
<li>
Participate in tabletop exercises and scenario-based drills.</li></ul> 


5. Technology Oversight
<ul><li>
Conduct routine system health checks on CCTV, alarms, access systems, and GSOC tools.</li> 
<li>
Assist with video retrievals, badge audits, and access reviews.</li> 
<li>
Report technical faults and coordinate with IT/security vendors for resolution.</li></ul> 


<h3 class="jobSectionHeader">Candidate Profile</h3>

Education
<ul><li>
Graduate in Security Management, Criminology, Emergency Management, or a related discipline.</li> 
<li>
Certifications such as ASIS APP/CPP/PSP are desirable but not mandatory.</li></ul> 


Experience
<ul><li>
2&ndash;3 years in GSOC, command/control room, or corporate security operations.</li> 
<li>
Exposure to multinational environments or large distributed operations preferred.</li></ul> 


Technical Skills
<ul><li>
Hands-on experience with ServiceNow, Genetec, Everbridge, Ontic, or equivalent systems.</li> 
<li>
Familiarity with CCTV, access control, alarm monitoring, and emergency communication tools.</li> 
<li>
Strong report-writing and analytical presentation skills.</li></ul> 


Language Skills
<ul><li>
Fluent spoken and written English (non-negotiable).</li> 
<li>
Local language (mother tongue of posting location) &ndash; mandatory.</li> 
<li>
Hindi desirable but not compulsory.</li></ul> 


Behavioral Competencies
<ul><li>
Vigilant, disciplined, and ethical.</li> 
<li>
Strong situational awareness and decision-making under stress.</li> 
<li>
Ability to multitask in a high-pressure, 24/7 GSOC environment.</li> 
<li>
Professional, composed, and collaborative team player.</li></ul> 


<h3 class="jobSectionHeader">Compensation &amp; Benefits</h3>
<ul><li>
Salary: Negotiable, depending on performance during interview.</li> 
<li>
Benefits: PF, Gratuity, Medical Insurance, Performance-linked incentives, and Transport (for night shifts as per policy).</li></ul> 


<h3 class="jobSectionHeader">Career Path</h3>

Security Analyst Senior Security Analyst GSOC Supervisor GSOC Manager 


<h3 class="jobSectionHeader">Application Details</h3>

Contact Person: Abhay Mulik 

Email: Abhay.mulik@in.g4s.com 

WhatsApp: +91 9113627282</div>

Security Analyst

Senior Cyber Security Analyst (Ops - Cloud) The Senior Security Analyst (Ops) sits within the Protective Monitoring function of the Cyber Security Operations Centre (CSOC). The CSOC is made up of Protective Monitoring, Incident Management, Threat Operations, Engineering and Consultancy. The role is a Tier 3 analyst in the Cloud Protective Monitoring Sub team.Cyber Operations purpose is to support safe care and build public trust by building NHS England's cyber resilience and enabling the wider health system to be cyber resilient, supporting Transformation Directorate's purpose of delivering the best care and outcomes for the NHS.The Cyber Operations sub-directorate consists of 4 operational areas:<ul><li>Cyber Security Operations Unit (CSOU)</li><li>Cyber Delivery Unit (CDU).</li><li>Cyber Improvement Programme.</li><li>Chief Information Security Office Function (CISO)</li></ul>The post of Senior Security Analyst has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.Please be aware that RRP is none contractual and subject to review. Main duties of the job As a Senior Security Analyst Ops you will:<ul><li>Provide Tier 3 security analytics and incident response for service-specific security monitoring.</li><li>Depose for Security Lead (Analyst) in their absence.</li><li>Act as an escalation point for Tier 2 Analysts for incidents and investigations.</li><li>Offer mentorship and guidance to Tier 2 Analysts to support others and their own growth and development.</li><li>Keep up to date with the latest security and technology developments, including researching and evaluating emerging cyber security threats and ways to manage them.</li><li>Use advanced analytic tools including SIEMs, and Cloud Consoles to determine emerging threat patterns and vulnerabilities.</li><li>Apply experience and knowledge to assist with investigations of triggered security alerts.</li><li>Support with the development and automation of SOC processes, to mature the security monitoring service.</li><li>Assist with the refinement of Use Cases and identification of areas for improvement of overall security posture.</li></ul> About us The NHS England board have set out the top-level purpose for the new organisation to lead the NHS in England to deliver high-quality services for all, which will inform the detailed design work and we will achieve this purpose by:<ul><li>Enabling local systems and providers to improve the health of their people and patients and reduce health inequalities.</li><li>Making the NHS a great place to work, where our people can make a difference and achieve their potential.</li><li>Working collaboratively to ensure our healthcare workforce has the right knowledge, skills, values and behaviours to deliver accessible, compassionate care</li><li>Optimising the use of digital technology, research, and innovation</li></ul>Important: Please be aware there are residency requirements you need to meet: All NHS England Cyber Security personnel must hold Security Clearance level as a minimum. To meet National Security Vetting requirements, SC clearances require 5 years continuous UK residency. In certain cases, this can be reduced to three years continuous UK residency, with additional overseas checks for the previous two years. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered. Please make sure you meet these requirements before applying for this role. You dont need to have SC already, however, failure to achieve the requirements for SC after offer will result in the job offer being withdrawn. For further advice please check Please be aware that should you be successful in this position, you will be hired to the job title of Senior Security Analyst and this job title is advertised to attract the right skills needed for the role.The post of Senior Security Analyst has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.Please be aware that RRP is non-contractual and subject to review Job responsibilities Due to the nature of this role, previous experience working in an Analyst role within a Cyber Security Operations Centre is essential. Essential Qualifications required<ul><li>SANS SEC504 (GIAC GCIH)</li><li>SANS SEC511 (GIAC GMON)</li><li>SANS SEC541 (GIAC GCTD)</li><li>SANS FOR508 (GIAC GCFA)</li><li>SANS FOR509 (GIAC GCFR)</li><li>AZ-500: Azure Security Engineer Associate</li><li>AWS Certified Security Speciality</li></ul>Residency requirements: All NHS England Cyber Security personnel must hold Security Clearance level as a minimum. To meet National Security Vetting requirements, SC clearances require 5 years continuous UK residency. In certain cases, this can be reduced to three years continuous UK residency, with additional overseas checks for the previous two years. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered. Please make sure you meet these requirements before applying for this role. You dont need to have SC already, however, failure to achieve the requirements for SC after offer will result in the job offer being withdrawn. For further advice please check Please be aware that should you be successful in this position, you will be hired to the job title of Senior Security Analyst and this job title is advertised to attract the right skills needed for the role.The post of Senior Security Analyst has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.Please be aware that RRP is non-contractual and subject to reviewSecondmentsApplicants from within the NHS will be offered on a secondment basis only, agreement should be obtained from their employer prior to submitting the application.Please note that the reason for the fixed term of this contract is short term vacancyYou can find further details about the role, including key responsibilities and accountabilities, alongside the organisational structure and person specification in the attached Job Description and other supporting documents. Person Specification Knowledge <ul><li>Working knowledge of modules, processes and technologies of Information Security Operation Centre (ISOC); ability to detect, response and utilise related platform and applications to perform cyber security initiatives.</li><li>Extensive knowledge of techniques, approaches and processes of digital threats; ability to detect, monitor, analyse and prevent digital threats.</li><li>Proven knowledge of tools, techniques and processes of intrusion detection and prevention; ability to detect, resolve and prevent intrusion behaviours to protect organisational networks.</li><li>Working knowledge of concept, issues and techniques of cloud security; ability to ensure security compliance of cloud infrastructure in various circumstances.</li><li>Working knowledge of concept, issues and techniques of endpoint security; ability to ensure security compliance of endpoint infrastructure in various circumstances.</li></ul> Skills and Experience <ul><li>Previous experience working in an Analyst role within a Cyber Security Operations Centre</li><li>Evidence of continuous professional development</li></ul> Qualifications <ul><li>Masters level degree or equivalent level of experience</li></ul> Disclosure and Barring Service Check This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.£66,828 to £75,218 a yearPer Annum (this includes a RRP payment of 20%) Contract Fixed term Duration 11 months Working pattern Full-time Reference number 990-TD-CY-17782-E Job locations<img src="https://www.jobg8.com/Tracking.aspx?HuNA3DPAJ8s2luG782ZjZ8HQUF8qp6fTm" width="0" height="0" />

Senior Cyber Security Analyst (Ops - Cloud)

Senior Cyber Security Analyst (Ops - Cloud) The Senior Security Analyst (Ops) sits within the Protective Monitoring function of the Cyber Security Operations Centre (CSOC). The CSOC is made up of Protective Monitoring, Incident Management, Threat Operations, Engineering and Consultancy. The role is a Tier 3 analyst in the Cloud Protective Monitoring Sub team.Cyber Operations purpose is to support safe care and build public trust by building NHS England's cyber resilience and enabling the wider health system to be cyber resilient, supporting Transformation Directorate's purpose of delivering the best care and outcomes for the NHS.The Cyber Operations sub-directorate consists of 4 operational areas:<ul><li>Cyber Security Operations Unit (CSOU)</li><li>Cyber Delivery Unit (CDU).</li><li>Cyber Improvement Programme.</li><li>Chief Information Security Office Function (CISO)</li></ul>The post of Senior Security Analyst has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.Please be aware that RRP is none contractual and subject to review. Main duties of the job As a Senior Security Analyst Ops you will:<ul><li>Provide Tier 3 security analytics and incident response for service-specific security monitoring.</li><li>Depose for Security Lead (Analyst) in their absence.</li><li>Act as an escalation point for Tier 2 Analysts for incidents and investigations.</li><li>Offer mentorship and guidance to Tier 2 Analysts to support others and their own growth and development.</li><li>Keep up to date with the latest security and technology developments, including researching and evaluating emerging cyber security threats and ways to manage them.</li><li>Use advanced analytic tools including SIEMs, and Cloud Consoles to determine emerging threat patterns and vulnerabilities.</li><li>Apply experience and knowledge to assist with investigations of triggered security alerts.</li><li>Support with the development and automation of SOC processes, to mature the security monitoring service.</li><li>Assist with the refinement of Use Cases and identification of areas for improvement of overall security posture.</li></ul> About us The NHS England board have set out the top-level purpose for the new organisation to lead the NHS in England to deliver high-quality services for all, which will inform the detailed design work and we will achieve this purpose by:<ul><li>Enabling local systems and providers to improve the health of their people and patients and reduce health inequalities.</li><li>Making the NHS a great place to work, where our people can make a difference and achieve their potential.</li><li>Working collaboratively to ensure our healthcare workforce has the right knowledge, skills, values and behaviours to deliver accessible, compassionate care</li><li>Optimising the use of digital technology, research, and innovation</li></ul>Important: Please be aware there are residency requirements you need to meet: All NHS England Cyber Security personnel must hold Security Clearance level as a minimum. To meet National Security Vetting requirements, SC clearances require 5 years continuous UK residency. In certain cases, this can be reduced to three years continuous UK residency, with additional overseas checks for the previous two years. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered. Please make sure you meet these requirements before applying for this role. You dont need to have SC already, however, failure to achieve the requirements for SC after offer will result in the job offer being withdrawn. For further advice please check Please be aware that should you be successful in this position, you will be hired to the job title of Senior Security Analyst and this job title is advertised to attract the right skills needed for the role.The post of Senior Security Analyst has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.Please be aware that RRP is non-contractual and subject to review Job responsibilities Due to the nature of this role, previous experience working in an Analyst role within a Cyber Security Operations Centre is essential. Essential Qualifications required<ul><li>SANS SEC504 (GIAC GCIH)</li><li>SANS SEC511 (GIAC GMON)</li><li>SANS SEC541 (GIAC GCTD)</li><li>SANS FOR508 (GIAC GCFA)</li><li>SANS FOR509 (GIAC GCFR)</li><li>AZ-500: Azure Security Engineer Associate</li><li>AWS Certified Security Speciality</li></ul>Residency requirements: All NHS England Cyber Security personnel must hold Security Clearance level as a minimum. To meet National Security Vetting requirements, SC clearances require 5 years continuous UK residency. In certain cases, this can be reduced to three years continuous UK residency, with additional overseas checks for the previous two years. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered. Please make sure you meet these requirements before applying for this role. You dont need to have SC already, however, failure to achieve the requirements for SC after offer will result in the job offer being withdrawn. For further advice please check Please be aware that should you be successful in this position, you will be hired to the job title of Senior Security Analyst and this job title is advertised to attract the right skills needed for the role.The post of Senior Security Analyst has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.Please be aware that RRP is non-contractual and subject to reviewSecondmentsApplicants from within the NHS will be offered on a secondment basis only, agreement should be obtained from their employer prior to submitting the application.Please note that the reason for the fixed term of this contract is short term vacancyYou can find further details about the role, including key responsibilities and accountabilities, alongside the organisational structure and person specification in the attached Job Description and other supporting documents. Person Specification Knowledge <ul><li>Working knowledge of modules, processes and technologies of Information Security Operation Centre (ISOC); ability to detect, response and utilise related platform and applications to perform cyber security initiatives.</li><li>Extensive knowledge of techniques, approaches and processes of digital threats; ability to detect, monitor, analyse and prevent digital threats.</li><li>Proven knowledge of tools, techniques and processes of intrusion detection and prevention; ability to detect, resolve and prevent intrusion behaviours to protect organisational networks.</li><li>Working knowledge of concept, issues and techniques of cloud security; ability to ensure security compliance of cloud infrastructure in various circumstances.</li><li>Working knowledge of concept, issues and techniques of endpoint security; ability to ensure security compliance of endpoint infrastructure in various circumstances.</li></ul> Skills and Experience <ul><li>Previous experience working in an Analyst role within a Cyber Security Operations Centre</li><li>Evidence of continuous professional development</li></ul> Qualifications <ul><li>Masters level degree or equivalent level of experience</li></ul> Disclosure and Barring Service Check This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.£66,828 to £75,218 a yearPer Annum (this includes a RRP payment of 20%) Contract Fixed term Duration 11 months Working pattern Full-time Reference number 990-TD-CY-17782-E Job locations<img src="https://www.jobg8.com/Tracking.aspx?18diDXqRkcXmfi4ffXZ5hN3FEd8xhvQPo" width="0" height="0" />

help AG

<div>Help AG is looking for a talented and enthusiastic Emirati national to join our Security Operations Centre (SOC) team as a Security Analyst. If you have a strong knowledge and interest in network security, this position might be the right one for you. The Security Analyst will be responsible for monitoring multiple security technologies and events using the Security Information Event Management (SIEM) tool in order to detect and identify IT security related incidents.
This role requires:<ul><li>
2 - 3 years of experience in information security, in areas such as security operations, intrusion detection, incident analysis, incident handling, log analysis, or firewall administration.</li><li>
2 - 3 years of experience in one of the following: Network operations or engineering or system administration on Unix, Linux, Windows.</li></ul> 
Responsibilities<ul><li>
Follow detailed operational process and procedures to appropriately analyse, escalate, and assist in remediation of critical information security incidents.</li><li>
Correlate and analyse events using the Splunk/Log Rhythm/Qradar SIEM tool to detect IT security incidents.</li><li>
Conduct analysis of log files, including forensic analysis of system resource access.</li><li>
Review customer reports to ensure quality and accuracy.</li><li>
Monitor multiple security technologies, such as SIEM, IDS/IPS, Firewalls, Switches, VPNs, and other security threat data sources.</li><li>
Respond to inbound requests via phone and other electronic means for technical assistance with managed services.</li><li>
Respond in a timely manner (within documented SLA) to support, threat, and other cases.</li><li>
Document actions in cases to effectively communicate information internally and to customers.</li><li>
Resolve problems independently and understand escalation procedure.</li><li>
Maintain a high degree of awareness of the current threat landscape.</li><li>
Participate in knowledge sharing with other analysts and writing technical articles for Internal Knowledge Bases.</li><li>
Perform other essential duties as assigned.</li><li>
Able to work in rotating shifts within a 24/7 operating environment.</li></ul> 
Qualifications &amp; Skills<ul><li>
Emirati candidates with family book will be preferred for this role.</li><li>
A Degree in Computer Science, Information Systems, Electrical Engineering, or a closely related degree.</li><li>
An active interest in internet security, incident detection, network and systems security.</li><li>
A sound knowledge of IT security best practices, common attack types and detection/prevention methods.</li><li>
Demonstrable experience of analysing and interpreting system, security, and application logs.</li><li>
Knowledge of the type of events that both Firewalls, IDS/IPS, and other security related devices produce.</li><li>
Experience in using SIEM tools such as Splunk, Log Rhythm, Qradar, Alien Vault, NitroSecurity, etc.</li><li>
TCP/IP knowledge, networking, and security product experience.</li><li>
Knowledge of Cyber Kill Chain and MITRE ATT&amp;CK frameworks.</li><li>
Possible attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.</li><li>
CCNA, CISSP, GCA, GCIA, GCIH, CEH certification would be preferable.</li><li>
Outstanding organizational skills.</li><li>
Exclusive focus and vast experience in IT.</li><li>
Strong analytical and problem-solving skills.</li><li>
A motivated, self-managed, individual who can demonstrate above average analytical skills and work professionally with peers and customers even under pressure.</li><li>
Very good communication skills.</li><li>
Strong written and verbal skills.</li><li>
Strong interpersonal skills with the ability to collaborate well with others.</li><li>
Ability to speak and write in English &amp; Arabic is mandatory.</li></ul> 
Benefits<ul><li>
Health insurance with one of the leading global providers for medical insurance.</li><li>
Career progression and growth through challenging projects and work.</li><li>
Employee engagement and wellness campaigns activities throughout the year.</li><li>
Excellent learning and development opportunities.</li><li>
Inclusive and diverse working environment.</li><li>
Flexible/Hybrid working environment.</li><li>
Open door policy.</li></ul> 
About Us 
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses across the Middle East with strategic consultancy combined with tailored information security solutions and services that address their diverse requirements, enabling them to evolve securely with a competitive edge.
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and maintaining its focus on all aspects of cybersecurity.
With best of breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</div>

Security Analyst (UAE National)

People Process Teck

To work in the payroll of our company Work Location: Bangalore To work in UK shift timingRole Summary:Our client in Dublin is seeking a vigilant and technically skilled Cyber Security Analyst to serve as the first line of defence against cyber threats. This role is ideal for professionals with a strong foundation in IT security who are eager to grow in a dynamic and compliance-driven environment.Key Responsibilities:<ul><li>Monitor networks and systems to detect and respond to security threats and anomalies</li><li>Act promptly on security alerts and escalate incidents as needed</li><li>Assist in incident response activities including containment, investigation, and recovery</li><li>Support internal and external audits, ensuring alignment with compliance standards</li><li>Maintain and update security documentation and procedures</li><li>Collaborate with IT teams to implement and enforce security controls</li><li>Contribute to continuous improvement of security monitoring and response capabilities</li></ul>Skills &amp; Qualifications:<ul><li>Bachelor&rsquo;s degree in Information Technology, Computer Science, or related field</li><li>1&ndash;3+ years of experience in cybersecurity or IT security operations</li><li>Familiarity with security tools and technologies including:</li><li>SIEM platforms (e.g., Splunk, QRadar)</li><li>IDS/IPS systems</li><li>Scripting languages (Python, PowerShell)</li><li>Understanding of security frameworks and standards such as ISO 27001</li><li>Certifications such as CISSP, ISO 27001 Lead Implementer, or equivalent are a plus</li><li>Strong analytical and problem-solving skills</li><li>Excellent communication and documentation abilities</li></ul>Job Type: Full-timePay: From &#8377;31,234.77 per monthWork Location: In person

Cyber Security Analyst

<div>At GAC Group IT, our dedication to providing top-notch solutions to 6000+ users worldwide rely on the dependability of our IT systems, all while upholding our ISO 27001 certification. As we grow the GAC Group IT Team, we are actively seeking a IT Security Analyst to bring his/her technological proficiency to enhance our security protocols.
The Group IT team is dedicated to constructing, configuring, maintaining, and enhancing applications throughout their life cycle while safeguarding them against cyber threats.
Key Responsibilities:<ul><li>
Implement and maintain security solutions for our network, infrastructure and applications hosted in On-prem Data Center and Azure Cloud.</li><li>
Closely work with Software development &amp; DevSecOps teams to resolve issues</li><li>
Guide GAC branch offices to improve their IT security posture.</li><li>
Monitor and respond to security incidents and perform root cause analysis.</li><li>
Research and stay updated on the latest security trends and best practices.</li></ul> 
Requirements:<ul><li>
A bachelor&rsquo;s degree in computer science/ information security</li><li>
A minimum of 2 years of experience as an IT Security Analyst or a similar role</li><li>
A proficiency in implementing &amp; managing security tools such as CSPM, VAPT, VMDR, EDR.</li><li>
excellent teamwork, problem-solving, analytical and communication skills</li><li>
Holding relevant certifications such as Azure Security (AZ-500), CCSP etc. will be advantages.</li></ul></div>

Group-IT Security Analyst

Search 10000+ Security operations analyst jobs near you this October. New roles added regularly across leading industries. Apply today.

10000 security operations analyst jobs NEAR_ME

Security Operations Center Analyst

Security Analyst

Senior Cyber Security Analyst (Ops - Cloud)

Senior Cyber Security Analyst (Ops - Cloud)

Security Analyst (UAE National)

Cyber Security Analyst

Group-IT Security Analyst