Cyber Security Analyst

Job Overview

The Cybersecurity Analyst – SOC Operations is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the enterprise environment. This role serves as a key member of the Security Operations Center (SOC) and focuses on threat detection, incident response, endpoint security, identity threats, and security monitoring of enterprise infrastructure, cloud environments, and critical business systems.

The analyst will investigate security alerts, triage incidents, correlate threat intelligence, and collaborate with IT and infrastructure teams to contain and remediate cybersecurity risks. This position plays an operational role in maintaining enterprise security visibility and minimizing cyber risk exposure.

Key Responsibilities/Accountabilities

Security Monitoring & Threat Detection

* Monitor enterprise security tools and alerts for suspicious activity, malicious behavior, or policy violations. * Analyze and triage security events generated from: + SIEM platforms + Endpoint Detection & Response (EDR) + Email security platforms + Network monitoring tools + Identity and access monitoring solutions + Cloud security platforms * Investigate indicators of compromise (IOCs), anomalous behaviors, and suspicious user activity. * Correlate logs and events across multiple security systems to identify threats. * Escalate high-risk incidents according to playbooks and incident severity classifications.

Incident Response

* Participate in cybersecurity incident response activities including: + Detection + Triage + Containment + Eradication + Recovery + Post-incident review * Investigate phishing, malware, ransomware, account compromise, insider threat, and unauthorized access incidents. * Document incident findings, root cause analysis, and remediation recommendations. * Support after-hours cybersecurity response activities when necessary.

Endpoint, Identity & Network Security