Job Description

Job Summary
Note: This is a 1 year contract role
The Cyber Security Analyst is responsible for monitoring, analyzing, testing and improving the organization's security posture by leveraging threat intelligence, conducting threat hunting, identifying gaps in controls, and ensuring compliance with regulatory and internal security requirements. This role involves proactive threat detection, risk awareness initiatives, and collaboration with stakeholders to mitigate emerging cyber risks.
Job Responsibilities
1. Threat Intelligence, Analysis & Hunting

• Assess intelligence reports to deliver actionable mitigation strategies to relevant stakeholders.
• Monitor and disseminate threat intelligence to targeted recipients across the organization.
• Conduct threat hunting activities based on Indicators of Compromise (IOCs), Tactics, Techniques, and Procedures (TTPs) derived from threat intelligence.
• Review vendor-provided reports and ensure service levels are met.
• Prepare and submit monthly threat reports in a timely manner.

2. Control Gap Identification & Improvement

• Map existing controls against the MITRE ATT&CK framework to identify missing controls.
• Determine prevention and detection gaps and recommend improvements.
• Ensure detection use cases are implemented based on TTPs identified from threat intelligence and hunting activities.

3. Regulatory & Internal Compliance

• Conduct exercises to meet regulatory and internal requirements, such as:

a) Simulated phishing exercises
b) Facilitate exercises to uplift the resilient and security posture of the organisation

• Drive risk awareness initiatives through intelligence sharing on various platforms.

4. Collaboration & Communication

• Work closely with internal teams and external vendors to maintain security standards.
• Provide clear and concise communication of threats, risks, and mitigation strategies to stakeholders.

Job Requirements

• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• 2-5 years of experience in cybersecurity operations, threat intelligence, or threat hunting.
• Strong understanding of MITRE ATT&CK framework and threat detection methodologies.
• Familiarity with regulatory compliance and security awareness programs.
• Excellent analytical, communication, and reporting skills.
• Certifications such as CISSP, CEH, GIAC, or equivalent threat hunting certifications (e.g., GCTI, GCIH) are a plus.
• Proactive and detail-oriented approach to day-to-day works.
• Ability to work under pressure and meet deadlines.
• Strong collaboration and stakeholder management skills.

Skills Required