Cybersecurity Analyst – Level 1 Incident Response

About the role

We are looking for an Executive IS&T Cybersecurity Analyst to serve as the Level 1 point of contact for security incidents. You will work closely with our outsourced SOC provider and internal teams to ensure timely resolution of threats and maintain service level agreements.

Key responsibilities

• Validate, triage and coordinate closure of security tickets escalated from the SOC.
• Investigate email security incidents, including phishing, quarantine, message tracing and containment.
• Run vulnerability scans, identify false positives, and manage asset onboarding/off‑boarding.
• Support compliance scans for internal applications, network and servers against CIS standards.
• Liaise between the external vulnerability service provider and internal stakeholders to track remediation.
• Monitor Microsoft Security ecosystem tools such as Defender for Endpoint and Defender for Identity.
• Assist with basic incident response tasks, evidence collection and documentation.
• Apply foundational AI security knowledge to identify unsafe AI usage patterns.

Required profile

• Diploma or degree in Cybersecurity, IT or a related field.
• 2‑4 years of hands‑on experience in cybersecurity operations, SOC support, email phishing investigation and vulnerability management.
• Strong analytical mindset and ability to work collaboratively.

Required skills

• Microsoft Defender for Endpoint
• Microsoft Defender for Identity
• Qualys or Nessus vulnerability management tools
• MITRE ATT&CK framework knowledge
• CIS security standards
• Email phishing investigation techniques
• AI security concepts