Security Analyst

Position Summary

Provides 24x7 first-level security monitoring and alert triage across identity, Microsoft 365, endpoint, and Azure security platforms. Responsible for early detection, proper ticketing, and timely escalation of security events.

Required Skills

• Microsoft Entra ID (Basic Administration)

• Active Directory Authentication Monitoring

• Microsoft MFA

• Exchange Online Protection

• Trend Micro Endpoint & Email Security

• CyberArk EPM & PAM

• Azure Monitor

• Log Analytics

• Microsoft Defender (Monitoring Level)

• Basic PKI Awareness

• ITSM / Ticketing Tools

Key Responsibilities

• Monitor Entra ID sign-in logs and authentication alerts

• Perform first-level triage of suspicious login attempts

• Monitor MFA failures and abnormal sign-in patterns

• Review Exchange Online Protection spam/phishing alerts

• Monitor Trend Micro endpoint alerts

• Monitor CyberArk EPM & PAM

• Monitor Azure security dashboards and alert queues

• Create and update security incident tickets

• Perform initial investigation using defined runbooks

• Escalate confirmed threats to L2 Security Engineer

• Track certificate expiry alerts and notify L2 team

• Validate Conditional Access policy failures

• Maintain daily security monitoring reports

• Participate in shift handover documentation

• Ensure SLA compliance for ticket updates

• Maintain proper incident documentation and closure notes