Cybersecurity Analyst

Security Operations and Monitoring 

• Monitor security alerts, dashboards, and logs across the Microsoft Defender suite (Endpoint, Identity, Cloud Apps, etc.) and Microsoft Purview to detect potential security incidents. 

• Manage and optimize Microsoft Defender security policies, configurations, and deployment across the enterprise environment. 

• Utilize Microsoft Purview capabilities (e.g., Data Loss Prevention, eDiscovery) to enforce compliance policies and protect sensitive data. 

• Develop and maintain custom detection rules and alerts within the security platforms to address emerging threats. 

Incident Response and Handling 

• Serve as a primary responder for security incidents, with a specific focus on malware, viruses, and other endpoint compromises. 

• Perform forensic analysis, containment, eradication, and recovery steps during active incidents. 

• Conduct root cause analysis for security incidents and implement necessary corrective and preventive measures. 

• Document all incident response activities, findings, and lessons learned to continuously improve the IR process. 

Threat Management and Analysis 

• Analyze threat intelligence to identify potential risks and vulnerabilities relevant to the organization. 

• Proactively hunt for threats across the environment using tools like Microsoft Defender XDR. 

• Develop and implement strategies to defend against prevalent malware types (e.g., ransomware, spyware, trojans). 

• Stay current with the latest cybersecurity trends, attack techniques, and adversary tactics. 

Security Enhancement and Reporting 

• Provide regular reports on the organization's security posture, incident metrics, and platform performance. 

• Collaborate with IT and other departments to implement security best practices and system hardening across the infrastructure. 

• Assist in the development and delivery of cybersecurity awareness training for employees.