Cyber Security Analyst

About the role

We are looking for a Cyber Security Analyst to join our hybrid security operations and desktop support team. The role combines remote monitoring of security events with on‑site technical assistance in both office and manufacturing plant environments.

Key responsibilities

• Monitor, triage and investigate alerts from SIEM, EDR and cloud platforms (≈70% of time).
• Lead incident response for phishing, malware and unauthorized access incidents.
• Provide Level 2 support for workstations, industrial PCs and HMI devices (≈30% of time).
• Fine‑tune detection rules and conduct proactive threat hunting using the MITRE ATT&CK framework.
• Automate repetitive tasks with PowerShell scripts.
• Manage Active Directory/Entra ID permissions and oversee vulnerability patching for endpoints and servers.
• Maintain cyber‑hygiene and ensure compliance with security standards across office and plant floors.

Required profile

• Minimum 2 years of experience in cyber security, SOC or hybrid IT support.
• Previous exposure to manufacturing or industrial environments (OT, SCADA, HMI) is highly preferred.
• Relevant certifications such as Security+, CySA+, SC‑200, AZ‑500 or Network+ are a plus.
• Strong analytical and troubleshooting abilities with the capacity to explain technical risks to non‑technical stakeholders.

Required skills

• EDR/SIEM tools: CrowdStrike, Microsoft 365 Defender, other SIEM platforms.
• Windows/M365 administration, Active Directory, Entra ID.
• Endpoint management: Intune, SCCM.
• Cloud security fundamentals: Azure, AWS.
• Vulnerability management tools: Rapid7, Qualys, Tenable.
• Scripting/automation: PowerShell.
• Threat‑hunting frameworks: MITRE ATT&CK.