Job Description

We are looking for a Senior Security Analyst with strong hands-on experience in email security, Microsoft security technologies, vulnerability management, SIEM monitoring, and incident response. The ideal candidate must have practical experience defending organizations against phishing, impersonation/BEC attacks, endpoint threats, and other cyber threats while continuously improving the organization’s security posture.

Key Responsibilities

Email Security

  • Manage and optimize Proofpoint and Microsoft Defender for Office 365.
  • Design and implement anti-phishing, impersonation, and BEC protection policies.
  • Investigate phishing emails reported by users, perform header and URL analysis, and take remediation actions.
  • Identify emerging email-based attack patterns and implement preventive controls.

Microsoft Security & Identity

  • Secure Exchange Online, Microsoft Entra ID, and Microsoft 365 environments.
  • Implement and manage Conditional Access policies, identity protection policies, and authentication security controls.
  • Support implementation of Zero Trust security architecture.

Vulnerability Management

  • Perform vulnerability scanning and remediation for Windows servers, Linux servers, and endpoints.
  • Use tools such as Tenable or Qualys to identify, prioritize, and track vulnerability.
  • Work with infrastructure teams to ensure timely remediation and validation.

Endpoint Security

  • Investigate alerts from EDR solutions such as Sophos or Microsoft Defender for Endpoint.
  • Analyze endpoint threats and coordinate containment and remediation actions.

SIEM & Security Monitoring

  • Monitor and manage SIEM platforms such as Microsoft Sentinel, Wazuh, or similar.
  • Develop and tune detection rules, alerts, and dashboards.
  • Perform log analysis, threat detection, and investigation of security alerts.

Incident Response & Forensics

  • Participate in security incident response and digital forensic investigations.
  • Perform root cause analysis and recommend security improvements.

Risk & Third-Party Security

  • Conduct security risk assessments across infrastructure and applications.
  • Perform third-party/vendor security assessments and identify potential risks.