Sr Security Analyst

The Senior Security Analyst is responsible for team lead activities, such as monitoring, analyzing, and responding to security incidents across enterprise systems, cloud environments, and networks. This role ensures the confidentiality, integrity, and availability of organizational information through proactive detection, incident response, and continuous improvement. The ideal candidate will have a strong technical background in leading threat analysis, SIEM integration and management, vulnerability management, and incident handling.

What you'll do:

• Monitor and investigate security alerts and events across SIEM, EDR, and network systems.
• Conduct root cause analysis and coordinate remediation of security incidents.
• Lead vulnerability assessments and ensure timely patching and mitigation.
• Develop and maintain incident response playbooks and escalation procedures.
• Collaborate with IT, DevOps, and Development teams to strengthen overall security posture.
• Lead proactive threat hunting and continuous tuning of detection mechanisms.
• Support internal and external audits (e.g., SOC 2) and risk assessments by providing evidence and guidance.
• Perform firewall management, including rule changes, troubleshooting, and SOP development for hybrid cloud/on-prem environments.
• Lead to red/blue team exercises and implement findings to improve defenses.
• Coordinate and assist with enterprise pen-tests, risk assessments, and compliance initiatives.
• Serve as a lead security advisor to business and technical teams, providing guidance on secure design, risk mitigation, and compliance using industry frameworks and best practices.

What you should have:

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, or a related field, or equivalent experience.
• 8+ years of experience in information security, incident response, or SOC operations.
• Proven hands-on experience with SIEM tools (Splunk, Sentinel, QRadar, etc.) and EDR/XDR platforms (CrowdStrike, Darktrace, Microsoft Defender).
• Strong experience securing and monitoring cloud environments (AWS, Azure).
• Deep knowledge of security frameworks (NIST CSF, ISO 27001, SOC 2).
• Advanced scripting and automation proficiency (Python, PowerShell, Terraform).
• Excellent analytical, problem-solving, and communication skills.

Preferred Qualifications:

• Relevant certifications such as AWS Security, CISSP, GCIH, GCIA, GPEN, GWAPT preferred.
• Experience integrating AI and automation into security operations workflows.
• Hands-on experience performing dynamic application security testing and red team exercises across endpoint and cloud environments.
• Expert-level networking and firewall expertise with platforms such as Palo Alto, Cisco, or Checkpoint.
• Master's degree in Cybersecurity, Information Technology, or a related field.