Cyber Security Analyst / Security Engineer
职位简介：网络安全分析师/安全工程师 职称：网络安全研究员 /安全工程师经验：6-10年 （可定制）部门：信息安全 / SOCJob 摘要 我们正在寻找一个熟练和主动的网络安全分析家，以通过有效监控，威胁猎杀，终点保护，电子邮件安全，云安全，漏洞管理和合规活动加强组织的安全姿势。理想候选人将拥有 CrowdStrike Falcon EDR,Check Point Harmony Email Security,SIEM 平台，云安全技术和安全治理框架的实践经验。关键责任：终点安全与威胁猎户 ·管理和管理 CrowdStrike Falcon EDR 平台。·执行主动的威胁猎户和安全调查。·分析终端警告，事件和可疑活动。·进行根源分析并协调事件响应活动。·监控和应对恶意软件，勒索软件和先进威胁。电子邮件安全管理 ·管理检查点和睦电子邮件解决方案。·配置和维护包括 DMARC,SPF 和 DKIM 在内的电子邮件保护控制。·调查鱼，伪造，BEC 和电子邮件传播威胁。·实施电子邮件保证政策和最佳实践。SIEM & Security Monitoring. ·通过 SIEM 平台监测安全事件和警报。·分析各种安全工具和基础设施组件的日志。·制定并细节调整警报和相关规则。·根据需要调查安全事件，升级关键威胁。云安全。·执行和维护 Azure 和 AWS 环境的安全控制。·监控云安全姿势，识别安全漏洞。·审查 IAM 配置并强制使用最小特权访问。·支持云合规和减轻风险倡议。脆弱性评估与透检验 (VAPT) ·使用行业标准工具进行弱点评价。·协调定期的透测试活动。· 追踪补救工作和验证风险关闭。· 准备漏洞评估报告和风险建议。安全治理与合规性。·协助制定和维护安全政策和标准。·支持监管和合规要求 （ISO 27001,SOC 2,PCI-DSS,GDPR 等）. ·参与安全审计和风险评估。
查看英文原文
This is a remote position.
Job Description (JD) – Cyber Security Analyst / Security Engineer
Job Title:Cyber Security Analyst / Security Engineer
Experience:6-10 Years (Customizable)
Department:Information Security / SOCJob Summary
We are seeking a skilled and proactive Cyber Security Analyst to strengthen our organization's security posture through effective monitoring, threat hunting, endpoint protection, email security, cloud security, vulnerability management, and compliance activities. The ideal candidate will have hands-on experience with CrowdStrike Falcon EDR, Check Point Harmony Email Security, SIEM platforms, cloud security technologies, and security governance frameworks.
Key Responsibilities
Endpoint Security & Threat Hunting
- Manage and administer CrowdStrike Falcon EDR platform.
- Perform proactive threat hunting and security investigations.
- Analyze endpoint alerts, incidents, and suspicious activities.
- Conduct root cause analysis and coordinate incident response activities.
- Monitor and respond to malware, ransomware, and advanced threats.
Email Security Management
- Manage Check Point Harmony Email Security solutions.
- Configure and maintain email security controls including DMARC, SPF, and DKIM.
- Investigate phishing, spoofing, BEC, and email-borne threats.
- Implement email security policies and best practices.
SIEM & Security Monitoring
- Monitor security events and alerts through SIEM platforms.
- Analyze logs from various security tools and infrastructure components.
- Develop and fine-tune alerting and correlation rules.
- Investigate security incidents and escalate critical threats as required.
Cloud Security
- Implement and maintain security controls for Azure and AWS environments.
- Monitor cloud security posture and identify security gaps.
- Review IAM configurations and enforce least-privilege access.
- Support cloud compliance and risk mitigation initiatives.
Vulnerability Assessment & Penetration Testing (VAPT)
- Conduct vulnerability assessments using industry-standard tools.
- Coordinate periodic penetration testing activities.
- Track remediation efforts and validate risk closure.
- Prepare vulnerability assessment reports and risk recommendations.
Security Governance & Compliance
- Assist in developing and maintaining security policies and standards.
- Support regulatory and compliance requirements (ISO 27001, SOC 2, PCI-DSS, GDPR, etc.).
- Participate in security audits and risk assessments.
- Maintain security documentation and compliance evidence.
Preferred Certifications
- CrowdStrike Falcon Certification
- CEH (Certified Ethical Hacker)
- CompTIA Security+
- AZ-500 (Microsoft Azure Security Engineer)
- AWS Security Specialty
- CISSP, CISM, or ISO 27001 Lead Implementer/Auditor
Originally posted on Himalayas