Cyber Security Analyst

About the role

The Cyber Security Analyst protects Specialized by monitoring security activity, reviewing findings, supporting incident response and working with teammates to turn alerts, vulnerability data, control gaps and tool output into clear actions. The role is an analyst position focused on monitoring, investigation, validation, project coordination and communication, not a dedicated security engineering role.

Key responsibilities

• Monitor security alerts and events across endpoint, identity, email, network, cloud, application and data-protection tooling.
• Triage and investigate suspicious activity, validate findings, gather evidence, document conclusions and escalate issues based on risk and impact.
• Partner with Global Technology and business teammates to review findings, agree on remediation steps and track work through closure.
• Help lead security projects that strengthen proactive security, set and improve security baselines, advance vulnerability management and support system hardening.
• Review vulnerability, exposure, configuration, penetration-test and bug-bounty findings, and help validate severity, ownership and remediation status.
• Support incident response by determining scope and impact, documenting timelines and actions, coordinating containment and contributing to post-incident follow-up.
• Help operate and improve security tools by reviewing coverage, tuning alerts, validating data quality and documenting workflows.
• Respond to security intake from teammates, including suspicious messages, access concerns and data-protection events.
• Create and maintain runbooks, investigation notes, dashboards, metrics and recurring reports.
• Contribute to control reviews, audits, access reviews and security awareness activities.

Required profile

• Minimum 5 years of experience in cybersecurity operations, security analysis, incident response, vulnerability management, IT operations or a related role.
• Ability to investigate ambiguous issues, connect evidence from multiple sources and make sound risk-based decisions.
• Ability to help lead cross-functional security projects and coordinate owners and dependencies.
• Strong organizational, written and verbal communication skills, with a service-oriented, collaborative mindset.

Required skills

• Working knowledge of endpoint, identity, email, networking, applications, vulnerabilities and data protection.
• Knowledge of cloud environments including AWS, Microsoft Azure and OCI.
• Experience reviewing alerts, logs and security-tool output and turning results into documented actions.
• Preferred: security monitoring, EDR, SIEM, email security, cloud security, vulnerability management, data protection or Atlassian platforms; incident investigations, threat hunting, system hardening or access reviews; Entra ID, SaaS security and common enterprise OS familiarity; dashboard, playbook and automation creation; Security+, CySA+, GSEC or equivalent certification.