Cyber Security Analyst – Threat Detection & Incident Response

About the role

Aaratech Inc is looking for a detail‑oriented Cyber Security Analyst to protect its systems, networks and data from cyber threats. The role focuses on monitoring security alerts, investigating incidents, managing vulnerabilities and ensuring compliance with industry frameworks.

Key responsibilities

• Monitor security alerts and logs using SIEM and other monitoring tools.
• Investigate suspicious activities and potential security incidents.
• Analyze system, application and network logs to detect anomalies and threats.
• Identify, analyze and respond to cybersecurity incidents, supporting containment, remediation and recovery.
• Document incident findings and coordinate resolution with security teams.
• Perform vulnerability scanning and risk assessments, recommend remediation actions and work with IT to apply patches.
• Support implementation of security policies and procedures and assist with compliance requirements (NIST, ISO 27001, SOC 2, CIS).
• Participate in security audits, risk assessments and documentation.
• Utilize security tools such as SIEM (Splunk, QRadar, Sentinel), EDR, vulnerability scanners, firewalls and IDS/IPS, and help improve monitoring processes.

Required profile

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science or a related field.
• 1–3 years of experience in cybersecurity or information security roles.
• Knowledge of network security, threat detection, vulnerability management and incident response processes.
• Experience with SIEM tools, endpoint security platforms and vulnerability management tools.
• Familiarity with cybersecurity frameworks such as NIST, ISO 27001 or CIS.
• Strong analytical, problem‑solving and communication skills and ability to work collaboratively.

Required skills

• SIEM platforms (Splunk, QRadar, Microsoft Sentinel)
• Endpoint Detection and Response (EDR) solutions
• Vulnerability scanning tools
• Firewalls
• Intrusion Detection/Prevention Systems (IDS/IPS)
• Network security monitoring
• Threat detection and analysis
• Vulnerability management
• Incident response procedures