Senior Security Analyst

We are hiring a Senior IT Security Analyst to work in our growing IT Security team. You will monitor our computer networks for security issues, install security software, and document any security issues or breaches you find.

You will have a strong background in Windows operating systems, with good experience in cyber security, including knowledge of information security industry standards and best practices i.e. ISO, MITRE etc. You should also have good knowledge in security as applied to Microsoft applications, Active Directory, Outlook/Exchange and Office365.

The Security Operations team is looking for individuals with a strong passion for security and knowledge of intrusion detection and response. As a Senior IT Security Analyst, you will be responsible for working with a global team to identify and remediate threats to the company. This is a hybrid role with 3 days on-site in Dublin 2.

Key Responsibilities:

Security Monitoring & Incident Response

- Monitor, detect, and triage security alerts received from Microsoft Security Tools, SIEM Solution and other security tools.
- Investigate and respond to cybersecurity incidents, including root cause analysis and post-incident reporting.
- Lead containment, eradication, and recovery efforts during security breaches.
- Participate in threat hunting and threat intelligence analysis.
- Provide out-of-hours support during critical incident response when required.

Vulnerability & Risk Management

- Execute and enhance the vulnerability management program: scanning, assessment, prioritization, and remediation tracking.
- Collaborate with IT and business units to implement secure configurations and remediate vulnerabilities.
- Contribute to enterprise risk assessments and security roadmaps.

Security Engineering & Architecture

- Contribute to the design and enhancement of security architectures specifically within Microsoft Azure environments, ensuring robust protection across cloud deployments.
- Support implementation of enterprise-wide security frameworks, policies, and reference architectures (e.g., NIST CSF, ISO 27001, IEC62443).
- Contribute to identity & access management (IAM), data protection, and zero trust architecture initiatives.

Operational Security & Tooling

- Administer and optimise security solutions including SIEM, endpoint protection, IAM, and malware prevention tools.
- Lead or support SIEM transition projects: data source onboarding, use case development, and tuning.
- Research, evaluate, and recommend emerging security technologies and enhancements.
- Continuously assess security monitoring effectiveness and recommend improvements.

Governance, Processes & Best Practices

- Develop and maintain SOC processes, documentation, and incident response playbooks.
- Define and promote company-wide IT security best practices and policies.
- Assist users in understanding security protocols and installing security software.
- Stay current on cybersecurity trends, threats, and technologies.

Requirements:

- Bachelor’s degree in computer science, Cyber Security, or a related field.
- 7+ years of professional experience in information security, including in security operations or SOC roles.
- Proven experience implementing and monitoring security controls across multiple environments.
- Strong knowledge of:

- Security incident management processes and methodologies.

- Vulnerability management and penetration testing tools.

- SIEM platforms (e.g., Microsoft Sentinel, Splunk or QRadar).

- Endpoint detection and response (EDR) such as Windows Defender and Vulnerability Management Tools such as Qualys, Nessus, Rapid7 etc.

- Threat intelligence platforms and threat hunting techniques.

- Microsoft security technologies (e.g., MS Defender XDR, Defender for Cloud, Entra, Purview and Intune).

- Cloud security, particularly in Azure (AWS/GCP a plus).

- Active Directory, Exchange, Office 365 administration, and Group Policy.

- Familiarity with security frameworks and standards (e.g., NIST CSF, ISO 27001).
- Familiarity with OT security standard IEC 62443 is preferred but not mandatory.
- Excellent problem-solving, analytical, and reporting skills.
- Demonstrated ability to design and implement security solutions across various technology layers.
- Strong interpersonal skills; capable of working independently and collaboratively.
- Working knowledge of OT/ICS security is desirable but not mandatory.
- Availability to support incident response efforts outside regular business hours.
- Professional certifications such as CySA+, GSEC, CISM, CISSP or equivalent.

ORNUACOMPETENCIES:

- Rigour: To ensure excellence in own work, applies effective professional skill, analysis and decision making, planning and reviewing.
- Forward-Looking: Responds positively to change and looks ahead to anticipate tasks.
- Ownership: Takes responsibility for and pride in delivering quality and results; is tenacious.
- Integrity: supports and encourages constructive outcomes for others by demonstrating integrity.

Note: We are an equal opportunities employer and welcome applications from all qualified candidates.

#J-18808-Ljbffr