Cyber Security Analyst

• Bachelor’s degree in Cyber Security, Computer Science, Information Technology, or a related field (or equivalent experience). \n

• 3-4 years of hands-on experience in security operations, incident response, or threat detection roles. \n

• Deep experience with at least one enterprise SIEM and one EDR/XDR platform in a production environment.

n \n

• Lead detection, triage, investigation, and response for security incidents across cloud and on-prem environments. \n

• Perform proactive threat hunting mapped to the MITRE ATT&CK framework; develop and tune detection rules (KQL, SPL, Sigma). \n

• Engineer and maintain SOAR playbooks to automate enrichment, containment, and response workflows. \n

• Own vulnerability management end-to-end - scanning, risk-based prioritization (CVSS/EPSS), remediation tracking, and reporting. \n

• Harden cloud security posture across AWS and Azure - identity (IAM), logging, misconfiguration remediation, and CSPM findings. \n

• Support identity security and Zero Trust initiatives - conditional access, MFA, privileged access management. \n

• Conduct phishing, malware, and forensic analysis; produce root-cause and lessons-learned reports. \n

• Mentor junior SOC analysts, review escalations, and improve runbooks and incident-response procedures. \n

• Brief technical and executive stakeholders on threats, incidents, and security posture. \n

\n, * Strong grasp of attacker tradecraft - phishing, ransomware, lateral movement, privilege escalation, C2 - and the MITRE ATT&CK framework. \n

• Solid networking and OS fundamentals: TCP/IP, DNS, Windows/Linux internals, Active Directory attack paths. \n

• Scripting ability in Python or PowerShell for automation, log analysis, and tooling. \n

• Strong incident documentation, communication, and stakeholder-briefing skills. \n

\n

Tools & Technologies You Will Use

\n \n

• SIEM & detection: Splunk (SPL), Microsoft Sentinel (KQL), Elastic Security, QRadar; Sigma rules. \n

• EDR/XDR & response: CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne; SOAR platforms (Splunk SOAR, Sentinel playbooks, Cortex XSOAR). \n

• Cloud & identity security: AWS (GuardDuty, Security Hub, CloudTrail), Azure (Defender for Cloud, Entra ID), Okta; CSPM tools (Wiz, Prisma Cloud exposure a plus). \n

• Vulnerability & analysis: Tenable Nessus, Qualys, Rapid7; Wireshark, Sysinternals; threat intel platforms (MISP, Recorded Future exposure a plus). \n

• Automation: Python, PowerShell, REST APIs. \n

\n

\n

Preferred Skills

\n \n

• Detection-engineering experience - building detections-as-code, tuning for false-positive reduction. \n

• Purple-team or adversary-emulation exposure (Atomic Red Team, Caldera). \n

• Digital forensics fundamentals (memory, disk, log timeline analysis). \n

• Exposure to compliance-driven environments (SOC 2, HIPAA, PCI DSS, NIST CSF). \n

• Certifications such as CISSP, GIAC (GCIH, GCIA, GCFA), CySA+, Microsoft SC-200, Splunk Core Certified, or AWS Security Specialty are a plus. \n

• Container & IaC security - Kubernetes/EKS/AKS runtime threats, image scanning, Terraform misconfig detection \n

• IR framework & SOC metrics - NIST 800-61 lifecycle, MTTD/MTTR, ATT&CK coverage measurement \n

\n

\n

About Clinisol Tech Inc.

\n

Clinisol Tech Inc connects businesses with skilled professionals who drive results. We combine industry expertise with a personalized approach to deliver the right talent quickly and efficiently. Our mission is to accelerate careers and companies by connecting exceptional technology talent with innovative organizations that value people.

\n