Cybersecurity Analyst

Security Operations and Monitoring

• Monitor security alerts, dashboards, and logs across the Microsoft Defender suite (Endpoint, Identity, Cloud Apps, etc.) and Microsoft Purview to detect potential security incidents.

• Manage and optimize Microsoft Defender security policies, configurations, and deployment across the enterprise environment.

• Utilize Microsoft Purview capabilities (e.g., Data Loss Prevention, eDiscovery) to enforce compliance policies and protect sensitive data.

• Develop and maintain custom detection rules and alerts within the security platforms to address emerging threats.

Incident Response and Handling

• Serve as a primary responder for security incidents, with a specific focus on malware, viruses, and other endpoint compromises.

• Perform forensic analysis, containment, eradication, and recovery steps during active incidents.

• Conduct root cause analysis for security incidents and implement necessary corrective and preventive measures.

• Document all incident response activities, findings, and lessons learned to continuously improve the IR process.

Threat Management and Analysis

• Analyze threat intelligence to identify potential risks and vulnerabilities relevant to the organization.

• Proactively hunt for threats across the environment using tools like Microsoft Defender XDR.

• Develop and implement strategies to defend against prevalent malware types (e.g., ransomware, spyware, trojans).

• Stay current with the latest cybersecurity trends, attack techniques, and adversary tactics.

Security Enhancement and Reporting

• Provide regular reports on the organization's security posture, incident metrics, and platform performance.

• Collaborate with IT and other departments to implement security best practices and system hardening across the infrastructure.

• Assist in the development and delivery of cybersecurity awareness training for employees.