Security Analyst

Mid Level

Deadline: Oct. 14, 2025

Job Name: Security Analyst

Application Deadline: 2025/10/14

Job Level: Mid Level

No. of vacancy: 1

Job Description

The role requires assessing security of the systems, identifying flaws, and implementing preventive and corrective measures to improve information security. He/ She will be required to critically analyze security events/ incidents, monitoring and management of security solutions and implement necessary controls to improve security posture of NCHL. He/ She shall work closely with Information Security Office (ISO) and Security Operations Center (SOC) for maintaining security compliance, conducting & managing VAPT activities executed internally or in co-ordination with the external security vendors/ suppliers, as required.

Job Specification

At least University degree in engineering/ science, IT/IS, computer applications or related field.
At least 5 years of experience with at least 2-3 years’ experience in cyber/ information security, assessment or monitoring.
Should have ability to critically analyze root cause of information security lapse and system failure, proactively monitor and recommend necessary security controls and coordinate for its implementation.
Should have sound knowledge and understanding on the requirements of ISO 27001 and PCIDSS security standard, including its implementation and maintenance. Past experience in implementation of ISO 27001 and/or PCI DSS will be advantage.
Ability to execute and monitor IS assessment/ VAPT/ Audits to support and deliver security initiatives including usage of various assessment tools.
Should have sound knowledge on TCP/IP network traffic and event log analysis from variety of sources including individual host logs, network traffic logs, firewall logs, web logs, or intrusion prevention logs. Experience with packet analysis (Wireshark) and Malware analysis.
Experience in administration of Security Information Event Management (SIEM) tools and creation of co-relation rules, incident response and malware/advanced threat protection.
Working knowledge of diverse operating systems, networking protocols, systems administration and security technologies
Ability to contribute in the development and implementation of security architecture and design of various systems, infrastructure and products.
Ability to learn, understand and apply new technologies with strong interpersonal and communication skills. Ability to effectively prioritize and execute tasks in high-pressure environment is crucial.