IT Security Analyst

Job Description:
As an IT Security Analyst, you will be responsible for safeguarding enterprise systems through advanced security operations, including vulnerability management, penetration testing, and secure software development practices. This role demands a proactive and experienced security professional capable of assessing risks, managing incident response, and collaborating with stakeholders to strengthen the client's security posture.

Key Responsibilities:

• Manage and execute vulnerability assessments and coordinate remediation efforts across applications, endpoints, and infrastructure
• Conduct application penetration testing, document findings, and recommend mitigation strategies
• Support Secure Software Development Lifecycle (SSDLC) and ensure solutions follow secure-by-design principles
• Analyse security impact of configuration, infrastructure, and application changes as part of change management
• Assess compliance of application, server, and network device configurations with established security standards
• Investigate security incidents, conduct thorough post-incident analyses, and implement corrective actions
• Evaluate the risk of newly discovered vulnerabilities and determine their potential impact on existing systems
• Coordinate user access reviews and perform annual password security audits to ensure policy compliance
• Automate security processes and tasks through scripting and integration with security tools
• Maintain detailed desk procedures, process documentation, and records related to all security functions

Required Skills, Experiences, Education, and Competencies:

• Minimum 5 years of hands-on experience in security operations, including vulnerability management and incident response
• Strong background in application penetration testing and interpreting technical vulnerability reports
• Proven experience supporting Secure SDLC, Secure by Design principles, and DevSecOps integration
• Solid scripting and automation experience using tools such as Python, PowerShell, or Bash
• Proficiency in assessing and implementing technical controls to align with security frameworks and standards
• Familiarity with endpoint and infrastructure security best practices and tools
• Demonstrated ability to coordinate with stakeholders across IT, business, and vendor teams
• Strong analytical, documentation, and reporting skills in support of security assessments and audits
• Excellent communication and interpersonal skills for stakeholder engagement and issue resolution
• Bachelor's degree in Information Security, Computer Science, or related field, or equivalent experience

The hourly range for roles of this nature are $40.00 to $80.00/hr. Rates are heavily dependent on skills, experience, location, and industry.

cyberThink is an Equal Opportunity Employer.