Cyber Security Analyst (Enterprise Security)

Join our Enterprise Security team as an Information Security Analyst and play a hands-on role in defending the enterprise against real-world threats. If you enjoy solving security problems, diving deep into alerts, building detections, and proactively hunting threats, this role is for you. You'll work in a modern SOC environment with advanced SIEM, XDR, email security, and cloud platforms, contributing directly to strengthening our security posture.

The core responsibilities for the job include the following:

Security Monitoring and Incident Response:

• Monitor and investigate alerts across SIEM, XDR, IDS/IPS, and email security tools.
• Own incident response end-to-end: triage, containment, and RCA reporting.
• Improve and maintain IR playbooks and runbooks.

Threat Hunting and Intelligence:

• Run hypothesis-based threat hunts using TTPs, IOCs, and behavioral patterns.
• Bring OSINT and threat intel insights into daily SOC workflows.
• Monitor the dark web for leaked credentials and data exposure.

Detection Engineering and Automation:

• Build and tune high-quality detections using MITRE ATT& CK
• Enhance SIEM dashboards, correlation rules, and SOAR automations.
• Reduce false positives and improve SOC efficiency.

Network, Email, and Cloud Security:

• Analyze network traffic, packet captures, and protocol behaviors.
• Support NGFW and WAF-based defenses.
• Investigate phishing attempts and strengthen email security.

Log Engineering and Purple Teaming:

• Onboard/validate log sources and ensure telemetry completeness.
• Use Linux, scripts, and APIs for log testing and troubleshooting.
• Purple teaming to validate detections and test defenses.

Requirements:

• 2+ years' experience in SOC, IR, threat detection, or blue team operations.
• Hands-on experience with SIEM/XDR (preferably Google SecOps) platforms and alert analysis.
• Strong understanding of email security, EDR, networks, and cloud basics.
• Familiarity with MITRE ATT& CK, the cyber kill chain, and IOC/BIOC creation.
• Comfortable with Linux, scripting fundamentals, and API tools (Postman).

Preferred Certifications:

• Google Professional Security Operations Engineer.
• APIsec University - API Pentesting.
• SOC/IR, EDR, or Cloud Security certifications (any).

Soft Skills That Matter:

• Clear communicator with strong documentation discipline.
• Calm under pressure, especially during active incidents.
• Curious, detail-oriented, and always eager to learn.