IT Security Analyst – Threat Hunting & Incident Response

About the role

We are looking for an IT Security Analyst to join our Security Operations team. The analyst will work closely with cross‑functional IT groups to monitor, detect, and respond to security threats across the organization.

Key responsibilities

• Continuously monitor security dashboards, SIEM alerts, and other security monitoring tools to identify potential threats and anomalies.
• Participate in security incident response activities, including triage, investigation, containment, and escalation.
• Perform initial analysis and first‑level response for security incidents and service/security‑related queries.
• Conduct log analysis and correlate security events to identify Indicators of Compromise (IOCs) and suspicious activity.
• Proactively support threat hunting activities across the environment to identify hidden or emerging threats.
• Coordinate with IT infrastructure, application, and network teams to triage alerts and support incident resolution.
• Work with external vendors to raise support cases, track progress, and follow up on issue resolution.
• Perform regular vulnerability assessments on endpoints and systems, and coordinate remediation efforts with IT support teams.
• Monitor the health, availability, and operational status of security tools including SIEM, EDR, Email Security, and log collection platforms.
• Validate and enrich IOCs against internal logs, SIEM alerts, and external threat intelligence sources.

Required profile

• Strong understanding of threat hunting, incident response, and security monitoring.
• Experience collaborating with IT infrastructure, application, and network teams.
• Ability to manage security tickets, ensure proper documentation, and meet SLA requirements.

Required skills

• SIEM (Security Information and Event Management) platforms.
• Endpoint Detection and Response (EDR) tools.
• Email security solutions.
• Log collection and analysis platforms.
• Vulnerability assessment and remediation processes.
• Threat intelligence and IOC enrichment.
• Malware triage and forensic artifact collection.
• Security dashboard monitoring.