Cybersecurity Analyst I

About the Role

The Security Analyst I plays an important role in protecting the organisation's systems, information, and digital assets from cybersecurity threats. As part of the Security Operations Centre (SOC), the analyst is responsible for monitoring security activity, investigating alerts, performing initial incident triage, and supporting the response to potential security incidents. This role is suited for individuals who have a strong foundation in cybersecurity concepts, demonstrate analytical and problem-solving skills, and are interested in developing their career within security operations. The position operates within a 24/7 Security Operations Centre, and candidates should be comfortable working rotating shifts, including nights, weekends, and public holidays.

Key Responsibilities

• Regularly monitor security alerts and events, conduct initial analysis, and respond to potential security incidents.
• Assist in the initial triage of security incidents, escalating to higher-level analysts when necessary.
• Collaborate with the incident response team to implement response plans and mitigate security threats.
• Investigate and analyse alerts generated by EDR, NDR, and SIEM tools to identify potential security incidents.
• Document investigation findings and provide detailed reports for further analysis.
• Provide structured handovers of ongoing investigations between Security Operations Centre shifts.
• Review and accept cases transferred from previous shifts.
• Maintain appropriate ownership of investigations until resolution, escalation, or formal handover.
• Contribute to the development and maintenance of security documentation, procedures, and incident response plans.
• Stay current with emerging threats, vulnerabilities, and industry best practices.
• Participate in training and development programmes to enhance skills and knowledge.

Requirements & Tech Stack

• Foundational understanding of cybersecurity principles, security monitoring, and incident response.
• Basic understanding of common cybersecurity threats, vulnerabilities, and attack techniques.
• Familiarity with security monitoring and investigation concepts.
• Understanding of endpoint, identity, network, cloud, and email security concepts.
• Familiarity with phishing investigation and basic threat intelligence analysis.
• Knowledge of common security frameworks and incident response methodologies.
• Experience working within a shift-based or 24/7 operational environment is advantageous.
• Entry-level cybersecurity certifications are beneficial but not mandatory.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related technical discipline.
• Less than 2 years of professional experience in cybersecurity or a related role.
• Strong analytical and problem-solving abilities.
• Good written and verbal communication skills.
• Practical exposure to security monitoring, incident investigation, IT operations, technical support, or system administration.
• Foundational competence in at least two operational domains (e.g. Security Intelligence, Identity Management, Compliance, Secured Infrastructure, Secured Development, or Security Education).