Job Title: Junior - Information Security Analyst

Job Summary

A Junior Information Security Analyst is an entry-level professional responsible for assisting in the monitoring, implementation, and maintenance of an organization’s information security policies and procedures. This role involves supporting senior security team members in identifying and mitigating cybersecurity threats, performing security assessments, and ensuring compliance with security standards. The ideal candidate will possess a foundational understanding of cybersecurity principles and demonstrate a strong willingness to learn and grow within the field.

Key Responsibilities

• Assist in monitoring security alerts, logs, and incidents using SIEM (Security Information and Event Management) tools.
• Perform initial triage and investigation of potential security threats or vulnerabilities.
• Support vulnerability scanning and basic penetration testing activities.
• Assist in maintaining and updating security policies, procedures, and best practices.
• Work with IT teams to ensure endpoint protection and system security updates are applied.
• Help maintain compliance with security frameworks (e.g., NIST, ISO 27001, SOC 2).
• Assist in security awareness training for employees.
• Document security incidents and contribute to forensic analysis as needed.
• Support in managing access controls and identity management systems.

Skills and Knowledge Required

• Basic understanding of network security principles, firewalls, IDS/IPS, and endpoint security.
• Familiarity with operating systems security (Windows, Linux, macOS).
• Understanding of common cyber threats, malware, and attack techniques.
• Basic knowledge of cloud security (AWS, Azure, Google Cloud).
• Experience with security tools such as SIEM, antivirus, and vulnerability scanners.
• Understanding of security compliance and regulations (GDPR, HIPAA, PCI-DSS).
• Analytical and problem-solving skills.

Educational Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Relevant security certifications (CompTIA Security+, CEH, SSCP) are a plus.

Key Focus Areas

• Incident monitoring and response.
• Security policy implementation.
• Basic risk assessment.
• Security awareness and training.

Experience

• 0–2 years of experience in IT security, network security, or a related field.
• Internship experience in cybersecurity is a plus.

Tools and Equipment

• SIEM platforms (Splunk, IBM QRadar, ArcSight).
• Antivirus and endpoint protection solutions (CrowdStrike, McAfee, Symantec).
• Vulnerability assessment tools (Nessus, Qualys, OpenVAS).
• Security frameworks and compliance tools.

Other Requirements

• Strong communication skills.
• Ability to work in a team environment.
• Willingness to learn and adapt to evolving threats.