IT安全分析师

Lakeside Software gives organizations with large, complex IT environments complete visibility across their entire digital estate — so they can do more with less. For too long, IT teams have operated in the dark. Costly inefficiencies, poor employee experiences, and unresolved problems hide where no one can see them. Lakeside changes that. We give everyone a better view: of the hidden issues, the smartest fixes, and the biggest savings.
It's why the world's leading global brands trust Lakeside — and how our customers achieve an average ROI of more than 250%
The Role 
Lakeside Software is looking for a skilled Cybersecurity Analyst to strengthen our defenses and safeguard the integrity, confidentiality, and availability of our Azure cloud services and information systems. This role calls for a proactive, detail-oriented professional with a solid understanding of current cybersecurity threats and the ability to communicate clearly with stakeholders at all levels. You'll join a collaborative, forward-thinking team committed to protecting what matters most.
What You'll Do 
The core functions of this role include: 
· Conduct comprehensive security assessments to identify potential vulnerabilities in our Azure systems, networks, and applications.
· Use Endpoint Device Management (EDM) solutions to remediate identified vulnerabilities through automated patch deployment.
· Collaborate with engineering teams to address vulnerabilities that fall outside the scope of automated patching.
· Utilize industry standard tools and methodologies to perform assessments and identify security gaps.
· Execute regular vulnerability scans to uncover security weaknesses and ensure compliance with security policies, and regulations.
· Analyze scan results, prioritize vulnerabilities based on risk, and recommend corrective actions.
· Monitor and review Indicators of Compromise (IOC) to detect and respond to potential security incidents.
· Analyze threat intelligence and perform investigations to prevent or mitigate security breaches.
· Collaborate with internal teams and external partners to contain and resolve security threats promptly.
· Perform routine review of alerts and security logs to identify anomalous activity, escalate confirmed incidents, and maintain documentation of findings.
· Conduct and document periodic user access reviews across systems and applications to support least-privilege controls and satisfy audit requirements.
· Assist in responding to customer and prospect security questionnaires, including DDQs and vendor risk assessments, by accurately documenting Lakeside’s controls, certifications, and security practices in alignment with our security program and approved disclosure posture.
· Performing special projects as required
Requirements
What You'll Bring to Lakeside 
The key requirements for this role include: 
· Bachelor's degree in computer science or a related field, or equivalent experience.
· 3+ years of experience in information security.
· Strong technical documentation skills.
· Hands-on experience with vulnerability scanning tools such as Tenable Nessus, Snyk Burpsuite, or equivalent.
· Solid knowledge of cybersecurity frameworks and standards, including SOC 2, ISO 27001, and CIS.
· Familiarity with information security features across Microsoft Windows, Linux, and macOS.
· Experience managing Entra ID, EDM - Intune and Jamf, and EDR solutions.
· Working knowledge of ITIL and NIST best practices.
· Experience with threat detection and incident response, including analyzing and responding to IOCs.
· Experience configuring and operating security tools including SIEM, WAF, EDR, and SASE platforms.
Preferred qualifications include:
· Knowledge of Azure Cloud Services
· Cloud security
Benefits

• 20 Days Annual Leave

• 45 Days Annual Leave Maximum

• 4 Festival Days Named

• 8 Festival Days Select

• 12 Days Sick Leave

• 100% Paid Medical Insurance & GPA

• Wellness Programme

• 3x CTC Group Life Insurance

• Pension

• Employee Referral Scheme

Originally posted on Himalayas