Cybersecurity Analyst

Responsibilities

• Own and drive initiatives to improve cybersecurity lifecycle activities across all relevant towers, including SOC, network security, and cloud compliance by identifying process gaps and leading improvements to operational excellence and organizational effectiveness.
• Define, monitor, and report quality-assurance and control-effectiveness metrics, including remediation ageing, recurring findings, and improvement outcomes.
• Support and drive compliance lifecycle initiatives across all cloud environments, including tracking, escalation, follow-up and closure of non-compliances (e.g. cordinating : pentest, threat modelling and risk management)
• Support respective domain owners to review, refine, and enforce operational cybersecurity policies and guardrails, updating procedures based on emerging threats and operational insights.
• Track and report changes to cloud and infrastructure control frameworks, and collaborate on validation and implementation initiatives.
• Review, validate, and authorize security group, network ACL, and cloud firewall rule requests, ensuring adherence to least-privilege principles and zero-trust network boundaries.
• Maintain and continuously audit cloud firewall topologies across virtual networks (VPCs/VNets), identifying redundant, overly permissive, or stale rules and coordinating remediation with networking teams.
• Supporting the operations and effectiveness of Vulnerability Management, ensuring findings are effectively managed and remediated across internal and external attack surfaces. Support the vulnerability scanning platform, oversee vulnerability identification and remediation processes, coordinate with application and infrastructure owners, and drive the resolution of findings across internal and external attack surfaces. Also supporting in handling External Attack Surface Management (EASM) findings, helping reduce organizational exposure by identifying, validating, and tracking remediation of assets and security risks.

Profile

• 5 years of experience with a vulnerability scanner and vulnerability management lifecycle, with cloud security constructs across major providers (AWS, Azure), including AWS Security Groups/NACLs, Azure NSGs, AWS Network Firewall, or Azure Firewall.
• General knowledge of best practices in IAM as well as application security i.e. Security control frameworks like NIST/CIS, OWASP top 10 risks, and basic SAST/DAST concepts
• Coordinate, advise and support the implementation of application security controls, container scanning, and secure baseline configurations within deployment pipelines (e.g. change management, validation, testing control effectiveness).
• Maintain audit-ready evidence for control assessments and verify that remediation actions are effective before findings are closed.
• Manage time-bound security control exceptions, including documented risk acceptance, compensating controls, accountable owners, expiry dates, and escalation of overdue actions.
• Demonstrates excellent communication and interpersonal skills, fostering a collaborative and supportive team environment.
• Possesses understanding of best practices in Identity and Access Management (IAM), vulnerability management, cyber security incident handling, firewall management.
• Relevant technical certifications (AWS, Microsoft, or vendor neutral)
• Degree in Information Technology or related fields

Additional Information

Other responsibilities:

• As operational demand requires, serve as the cybersecurity operational liaison within the integrated operations center (IOC), collaborating with network, cloud, and systems engineering teams to correlate cross-domain telemetry.
• Provide overflow support to monitor, alert on, and analyze security telemetry across multi-cloud environments, checking alignment with baseline security configurations and compliance frameworks.
• Collaborate with Yara SOC, where needed, on triage, initial containment, and coordination of operational security incidents, facilitating root-cause analysis and operational post-mortems across functional domains.
• Support the implementation, testing, and documentation of approved security group, network ACL, and cloud firewall rule changes with the responsible engineering teams.
• Participate in daily stand-up meetings, where applicable.

Apply no later than