Monitor and analyze logs, network traffic, and security alerts in real time to identify potential threats or suspicious activity.
Validate, escalate, and communicate security incidents to customers with clear explanations of threat characteristics and remediation options.
Write detailed security incident reports documenting the threat, impact, findings, and recommendations.
Research emerging threats, vulnerabilities, and cyber attack techniques, adjusting detection capabilities as needed.
Routinely review security incidents and deliverables to ensure adherence to established procedures, guidelines, and quality standards.
Document issues, perform corrective actions, and provide feedback to other analysts as needed.
Ensure timely and accurate security incident detection, triage, classification, and reporting in accordance with defined SLAs.
Communicate security issues to customers clearly, both verbally and in writing.
Escalate complex or difficult issues to senior staff when appropriate.
Maintain an understanding of current vulnerabilities, attack methods, threat actors, and associated countermeasures.
Expand knowledge of cybersecurity technologies, tools, detection techniques, and industry best practices.
Identify opportunities for process improvement and contribute to the enhancement of cybersecurity procedures.
Manage and track customer issues, requests, and follow-up actions to ensure resolution and customer satisfaction.
Additional duties as assigned or required.

9 years relevant experience with Bachelors in related field; 7 years relevant experience with Masters in related field; 4 years relevant experience with PhD or Juris Doctorate in related field; or High School Diploma or equivalent and 13 years relevant experience.
Experience monitoring and analyzing logs, alerts, or network traffic within a SOC or cybersecurity environment.
Strong understanding of cybersecurity concepts, attack methodologies, vulnerabilities, and defense strategies.
Ability to write clear, detailed, and accurate incident reports.
Familiarity with SIEM platforms, IDS/IPS tools, endpoint detection technologies, or other security-monitoring tools.
Strong analytical and problem-solving skills with the ability to triage and validate incidents quickly.
Excellent verbal and written communication skills, with the ability to explain technical issues to non-technical audiences.
Ability to follow established procedures, guidelines, and SLAs while maintaining high-quality output.
Strong attention to detail and commitment to accuracy in incident review and documentation.
Ability to manage multiple incidents, customer requests, and priorities in a fast-paced environment.
Interest in continuous learning and staying current on cybersecurity threats and technologies.

Cyber Security Analyst – Cyber Network Analysis Tech 4

Key skills