Security Analyst

Job Title: Security Analyst

Line of Business: Services

Work Arrangement: Hybrid (Onsite & Remote) | Requires travel flexibility

Role Purpose

The Security Analyst administers cloud security policies, enforces preventive and recovery strategies, and conducts vulnerability and risk assessments for Managed Services customers to minimize internal and external security threats.

Key Responsibilities

• Risk & Vulnerability Management: Conduct risk, gap, and vulnerability assessments across customer environments, cloud platforms, and IT infrastructure using standard security tools and frameworks.
  

• Security Operations & Incident Response: Respond to security incidents across all project lifecycles, participate in incident response workflows, and implement authorized security enhancements through a strict change management process.
  

• Client Advisory & Auditing: Perform security audits of customer systems, deliver clear reports detailing identified risks and recommended remediations, and lead client discussions regarding findings.
  

• Governance & Project Guidance: Proactively advise internal project teams and client stakeholders on physical/technical controls, security guidelines, and compliance standards.
  

• Reporting & Continuous Improvement: Generate operational security metrics for management and continuously refine information security practices across As-A-Service offerings.
  

Requirements & Experience

• Experience: 1–3+ years of dedicated experience in an IT security role within a enterprise or Managed Services (MSP) environment.
  

• Technical Knowledge: Hands-on understanding of Windows and Linux/UNIX operating systems, secure network architectures, identity and access management (IAM), and firewall/IDS/IPS protocols.
  

• Education: Tertiary qualifications in Information Systems, Computer Science, or equivalent practical IT experience.
  

• Core Competencies: Exceptional written and verbal communication, strong technical documentation skills, proven negotiation abilities, and the capacity to remain calm under high-pressure security incidents.
  

• Operational Style: Self-starter capable of operating with minimal supervision while maintaining a proactive advisory mindset.
  

Preferred Certifications & Frameworks

• Industry Certifications: CISSP, CISA, CISM, OSCP, CEH, or GIAC.
  

• Vendor Certifications: Fortinet NSE 4+, Palo Alto PCNSA/PCNSE, Check Point CCSA, or Cisco CCNA/CCNP Security.
  

• Framework Familiarity: ISO 27001/2, ISO 31000, NIST, COBIT, or ITIL v3.