Senior Cybersecurity Analyst

About the role

The Senior Cybersecurity Analyst will lead the design, implementation and continuous improvement of security controls across on‑premise and cloud environments. This hands‑on position focuses on proactive monitoring, control tuning and measurable risk reduction for critical payment and treasury systems.

Key responsibilities

• Manage and optimise firewalls (Palo Alto, FortiGate), CASB, email security, WAF and cloud security controls.
• Review and fine‑tune security rules, eliminate risks and improve configurations.
• Drive vulnerability remediation to meet SLA targets.
• Govern access through ServiceNow, enforce least‑privilege policies and manage the join‑move‑leave lifecycle.
• Administer privileged access management, monitor privileged activity and conduct regular access reviews.
• Support SSO integrations and strengthen conditional access policies.
• Tune alerts, support investigations and enhance detection capabilities.
• Track security metrics, produce reports and lead continuous risk‑reduction initiatives.
• Automate repetitive tasks using PowerShell or Python.

Required profile

• 5–7 years of experience in cybersecurity operations, preferably in regulated or financial environments.
• Strong knowledge of IAM, PAM and security frameworks such as ISO 27001 and NIST.
• Experience with ServiceNow for access governance.
• Bachelor’s degree in a relevant field; certifications such as Palo Alto, Fortinet, Microsoft Security, ITIL, ISO 27001 or CISSP are a plus.
• Excellent analytical, documentation and communication skills.

Required skills

• Palo Alto Networks firewalls
• FortiGate firewalls
• VPN and network segmentation
• CASB solutions
• Email security platforms
• Web Application Firewall (WAF)
• Vulnerability management tools
• Identity and Access Management (IAM)
• Privileged Access Management (PAM)
• Azure security and cloud conditional access
• ServiceNow access governance
• PowerShell scripting
• Python programming
• SSO integration
• Security monitoring and detection
• Security reporting and metrics