Security Analyst – Incident Response & Threat Hunting

About the role

The Security Analyst will protect organizational assets and ensure business continuity by leading end‑to‑end incident management. You will rapidly detect, triage, contain, and remediate cybersecurity incidents while continuously strengthening the organization’s resilience.

Key responsibilities

• Lead and support security incident investigations, including digital forensics, malware analysis, root‑cause analysis, and threat remediation.
• Proactively identify, investigate, and mitigate threats through log analysis, threat hunting, vulnerability assessment, and security analytics.
• Develop, optimize, and maintain detection use cases, correlation rules, and response playbooks based on threat intelligence and attack techniques.
• Enhance security operations to ensure continuous monitoring, timely detection, and response to security events.
• Drive automation, process optimization, and adoption of security best practices and industry frameworks.

Required profile

• Minimum 3 years of experience in security operations, incident response, or threat detection.
• Bachelor’s degree or higher in Computer Science, Information Security, or a related field.
• Relevant certifications such as GCIH, GCFA, GREM, or OSCP.

Required skills

• Hands‑on experience with at least one SIEM platform (Splunk, IBM QRadar, Elastic Stack).
• Familiarity with security tools: EDR, IDS/IPS, WAF, firewalls.
• Strong log analysis skills (Windows Event Logs, EDR logs, network traffic logs, cloud security logs).
• Experience in digital forensics and root‑cause determination.
• Proficiency in scripting languages (Python, Shell) for security automation.