Senior Security Analyst

DESCRIPTION

Oversee and prioritise security support tickets received from internal teams and MDR/SOC across divisions, ensuring timely resolution and thorough documentation.

Review the configuration of security tools across divisions and ensure a consistent security posture (including VPN. Network Devices, Firewalls), including making sure all existing security tools from Microsoft Security suite are used appropriately.

Investigate advanced threats and work closely with the SOC/MDR team to do consistent threat hunting and remediation, including working on updating the playbooks and automating the Incident response.

Stay informed about emerging threats and regularly assess the effectiveness of our controls. Proactively recommend and implement necessary measures to continuously enhance our security posture.

Perform governance audits across all applications in accordance with established security policies and best practices, collaborating closely with the Application team to address and remediate identified gaps   .

Collaborate with divisional ISOs to support their security initiatives, including incident response.

Help drive the security culture by staying abreast of the security awareness trainings and assisting with phishing email analysis and remediation.

Coordinate the incident response, including recovery.

ESSENTIAL MINIMUM EXPERIENCE

Minimum of 3 years of relevant experience in cybersecurity or security operations.

Solid understanding of cyber hygiene, threat types, and security principles.

Relevant experience working with and configuring enterprise security tools.

Relevant exposure to auditing and compliance processes.

DESIRED EXPERIENCE

Prior experience working in a group or multi-division structure is an advantage.

Familiarity with security frameworks (e.g., NIST, ISO 27001).

Experience in healthcare, regulated industries, or multi-national environments.

ESSENTIAL EDUCATION

Relevant Bachelor’s degree in Information Security, Computer Science or a related field.

DESIRED EDUCATION

Certified Information Systems Auditor (CISA)

Systems Security Certified Practitioner (SSCP)

Certified Cloud Security Professional (CCSP) 

Microsoft Security Operations Analyst or equivalent

Security operations and ticket management

Enterprise security tools (EDR, DLP, SIEM, Mimecast, SecurityAwareness etc.)

Audit and policy compliance

Security configuration and change management

Cross-functional collaboration

Cloud Security (Azure Security Center, Microsoft Defender)

Attention to detail

Problem solving

Communication and team work

High level of initiative and self-motivation