
Assistant Security Analyst
Vendavo
About the Role
Join Vendavo's growing Security & Compliance team as an Assistant Security Analyst. This entry-level (L0-L1) role is suited for freshers or candidates with up to 3 years of experience. You will work alongside experienced security professionals, monitor, triage, and respond to security events, and build a strong foundation for a career in cybersecurity. You will gain exposure to sophisticated security tools and technologies, learn how they protect people, data, and customers, and grow in a collaborative, learning-focused environment. The role may require operating in a 24x7 shift environment.
Key Responsibilities
- Manage the end-to-end lifecycle of security alerts, including identification, categorization, prioritization, escalation, closure, reporting, and documentation.
- Generate periodic reports, build and maintain a centralized dashboard, and explore secure automation opportunities.
- Coordinate across functions to drive closure of risks, events, and incidents.
- Assist in various compliance activities such as ISO 27001, ISO 22301, ISO 42001, NIST CSF, NIST AI RMF, SOC 2, CIS, and CCM.
- Other duties as assigned.
Requirements & Tech Stack
- Up to 3 years of professional experience in IT/OT security.
- Freshers and interns with relevant exposure are welcome.
- Basic understanding of networking, operating systems, OSI layers, common protocols, and common threat vectors.
- Basic understanding of information security concepts: the CIA triad, risk, threat, and vulnerability.
- Intermediate-level hands-on exposure to Generative AI platforms for automation, analysis, reporting, and similar tasks.
- Strong analytical and problem-solving skills with keen attention to detail.
- Strong written and verbal communication skills, with the ability to engage stakeholders through digital channels, including email and virtual meetings.
- Eagerness to learn and grow within the Information Security function.
- Willingness to work in a 24x7 environment.
Exposure to the following technologies
- NextGen SIEM
- EDR
- CSPM
- DSPM
- ASPM
- EASM
- DLP
- Identity Protection
- PAM
- Vulnerability Management platforms
- AI security platforms
- Cloud Security
Qualifications
None explicitly listed beyond the experience and skills.
