Cyber Security Analyst - Threat Hunting
About the role
The Cyber Security Analyst - Threat Hunting role is part of the Cyber Security Operations team and is responsible for proactively identifying, investigating, and mitigating cyber threats across various environments including on-premises, cloud, network, endpoint, and applications. The position involves conducting threat hunting, analyzing threat intelligence, leading incident investigations, performing malware analysis, and conducting vulnerability assessments, penetration testing, and security assessments. Candidates should have a bachelor's degree in a relevant field and 2-4 years of experience in cyber security operations or related areas. The role requires hands-on experience with security tools and frameworks, strong analytical skills, and the ability to communicate findings to both technical and non-technical stakeholders.
Must have
- Bachelor's Degree in Information Technology, Information Security, Telecommunications, or a related discipline from a recognized university or institute.
- Minimum 2-4 years of experience in Cyber Security Operations, Threat Hunting, Incident Response, Vulnerability Management, or Penetration Testing.
- Strong understanding of Cyber Security Operations and Incident Management.
- Hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT).
- Good understanding of: OWASP Top 10, NIST Cybersecurity Framework, ISO 27001, MITRE ATT&CK Framework.
- Experience with security testing tools such as: Kali Linux, Burp Suite, Nessus, Nmap, Wireshark.
- Knowledge of API Security Testing and Application Security Assessments.
- Basic understanding of malware analysis, threat intelligence, and digital forensics.
- Strong analytical, troubleshooting, and problem-solving skills.
- Ability to work independently and adapt to emerging technologies and cyber threats.
Nice to have
- Candidates holding one or more of the following certifications will have an added advantage: CEH (Certified Ethical Hacker), CompTIA PenTest+, eJPT (INE Security), LPT (Licensed Penetration Tester), CHFI (Computer Hacking Forensic Investigator), ITIL Foundation.
Technologies
- API Security
- Burp Suite
- CEH
- Cybersecurity
- ISO 27001
- ITIL
- Linux
- MITRE ATT&CK
- Nessus
- NIST
- Nmap
- OWASP
- Penetration Testing
- Threat Hunting
- Wireshark
Highlights
Preferred certifications such as CEH, CompTIA PenTest+, eJPT, LPT, CHFI, or ITIL Foundation are advantageous but not mandatory. The listing does not specify location, remote work, or application deadline.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka