Information Security Analyst

Job Description

Security Monitoring and Analysis:

• Continuously monitor networks and systems for security breaches.
• Use tools like intrusion detection/prevention systems (IDS/IPS), firewalls, and SIEM solutions to analyze threats.

Incident Response:

• Investigate security breaches and lead incident response efforts.
• Prepare detailed reports on breaches, mitigation, and prevention strategies.

Vulnerability Assessment:

• Perform regular vulnerability scans and risk assessments.
• Collaborate with IT teams to implement patches and security updates.

Policy Development and Compliance:

• Develop and enforce security policies, procedures, and standards.
• Ensure compliance with regulations like GDPR, HIPAA, or ISO 27001.

Access Control and Authentication:

• Manage user access rights, roles, and permissions.
• Implement and maintain multi-factor authentication (MFA) systems.

Education and Training:

• Conduct security awareness training for employees.
• Provide guidance on safe practices to prevent phishing and social engineering attacks.

Research and Recommendations:

• Stay updated on emerging security threats and technologies.
• Recommend and implement new security tools or methodologies.

Audit and Reporting:

• Prepare and present regular reports on security status to management.
• Coordinate with auditors for security audits and compliance reviews

Job Requirement

Technical Skills:

• Proficiency in operating systems (Windows, Linux, macOS).
• Familiarity with networking concepts (TCP/IP, DNS, VPN, etc.).
• Experience with security tools (antivirus, firewalls, IDS/IPS, SIEM platforms).
• Knowledge of scripting or programming (Python, PowerShell, Bash).

Soft Skills:

• Strong analytical and problem-solving skills.
• Effective communication for technical and non-technical audiences.
• Attention to detail and a proactive mindset.

Certifications (Optional but Preferred):

• Certified Information Systems Security Professional (CISSP).
• Certified Ethical Hacker (CEH).
• CompTIA Security+.
• GIAC Security Essentials (GSEC).

Education and Experience

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 1+ years of experience in IT or cybersecurity roles.
• Experience in manufacturing industries is advantageous.

Work Environment

• May require on-call availability for incident response.
• Collaboration with IT teams, management, and external auditors.

Career Path: An Information Security Analyst can advance to roles like Security Engineer, Cybersecurity Manager.