IT Security Analyst – Threat Hunting & Incident Response

About the role

The IT Security Analyst will join the Security Operations team to continuously monitor security dashboards, investigate alerts, and support vulnerability management and compliance activities across the organization.

Key responsibilities

• Monitor SIEM alerts, security dashboards, and other tools to identify threats and anomalies.
• Perform log analysis, correlate events, and detect Indicators of Compromise (IOCs).
• Participate in incident response: triage, investigation, containment, escalation, and documentation.
• Conduct threat‑hunting activities to uncover hidden or emerging threats.
• Coordinate with IT infrastructure, application, and network teams to resolve alerts and incidents.
• Work with external vendors to raise and track support cases.
• Execute regular vulnerability assessments on endpoints and systems and drive remediation.
• Support audit and compliance requirements by providing evidence and reports.
• Manage security‑related eService tickets, ensuring proper categorisation, prioritisation, and SLA adherence.
• Monitor health and availability of security tools (SIEM, EDR, Email Security, log collection platforms) and report issues.
• Validate and enrich IOCs using internal logs and external threat intelligence.
• Assist with malware triage, forensic artifact collection, and testing of new log sources and detection use cases.

Required profile

• Strong understanding of threat hunting, incident response, and security monitoring.
• Experience analysing logs and correlating security events.
• Ability to work collaboratively with cross‑functional IT teams and external vendors.
• Familiarity with vulnerability assessment processes and compliance support.
• Attention to detail in ticket management and documentation.

Required skills

• SIEM platforms
• Endpoint Detection and Response (EDR)
• Email Security solutions
• Log management and analysis tools
• Vulnerability assessment tools
• Threat intelligence and IOC enrichment
• Incident response and malware triage
• Ticketing systems (eService)