Senior Security Analyst

About the role

Netrix Global is seeking an experienced Senior Security Analyst to join its Managed Services – Security team. The analyst will monitor, triage, and investigate security events across client environments, ensuring timely incident identification and clear communication with clients.

Key responsibilities

• Monitor and triage alerts from SIEM, EDR/XDR, firewalls, IDS/IPS, endpoint, identity, email and cloud telemetry sources.
• Perform initial investigations to validate alerts, assess severity, determine scope and identify root causes.
• Analyze intrusion detection alerts, firewall events, endpoint activity, system logs, network traffic and authentication events for malicious activity.
• Document evidence, determine attack success, and notify clients following escalation procedures.
• Enrich events with threat intelligence, map activity to MITRE ATT&CK where appropriate, and support incident response with technical findings.
• Maintain case documentation, contribute to detection tuning, false‑positive reduction, knowledge‑base articles and runbooks.
• Research emerging threats, vulnerabilities, attacker tactics and security‑operations best practices.

Required profile

• Strong interpersonal, organizational, communication and technical writing abilities.
• Ability to convey technical findings and recommended actions clearly to clients and internal stakeholders.
• Self‑motivated, able to work independently, prioritize alerts and follow established procedures.

Required skills

• Working knowledge of TCP/IP, HTTP, SMTP, DNS and SMB protocols.
• Familiarity with firewalls, DMZs, IDS/IPS, web‑application architecture, endpoint security and Active Directory.
• Understanding of common malware categories, phishing, brute‑force, port scanning, SQL injection and credential abuse.
• Experience reviewing logs, alerts, packet captures and endpoint telemetry for investigations.
• Proficiency with SIEM, EDR/XDR, IDS/IPS, firewall and cloud security monitoring tools.
• Knowledge of MITRE ATT&CK framework and threat‑intelligence enrichment.