Job Title: Security Analyst
Line of Business: Services
Work Arrangement: Hybrid (Onsite & Remote) | Requires travel flexibility
Role Purpose
The Security Analyst administers cloud security policies, enforces preventive and recovery strategies, and conducts vulnerability and risk assessments for Managed Services customers to minimize internal and external security threats.
Key Responsibilities
Risk & Vulnerability Management: Conduct risk, gap, and vulnerability assessments across customer environments, cloud platforms, and IT infrastructure using standard security tools and frameworks.
Security Operations & Incident Response: Respond to security incidents across all project lifecycles, participate in incident response workflows, and implement authorized security enhancements through a strict change management process.
Client Advisory & Auditing: Perform security audits of customer systems, deliver clear reports detailing identified risks and recommended remediations, and lead client discussions regarding findings.
Governance & Project Guidance: Proactively advise internal project teams and client stakeholders on physical/technical controls, security guidelines, and compliance standards.
Reporting & Continuous Improvement: Generate operational security metrics for management and continuously refine information security practices across As-A-Service offerings.
Requirements & Experience
Experience: 1–3+ years of dedicated experience in an IT security role within a enterprise or Managed Services (MSP) environment.
Technical Knowledge: Hands-on understanding of Windows and Linux/UNIX operating systems, secure network architectures, identity and access management (IAM), and firewall/IDS/IPS protocols.
Education: Tertiary qualifications in Information Systems, Computer Science, or equivalent practical IT experience.
Core Competencies: Exceptional written and verbal communication, strong technical documentation skills, proven negotiation abilities, and the capacity to remain calm under high-pressure security incidents.
Operational Style: Self-starter capable of operating with minimal supervision while maintaining a proactive advisory mindset.
Preferred Certifications & Frameworks
Industry Certifications: CISSP, CISA, CISM, OSCP, CEH, or GIAC.
Vendor Certifications: Fortinet NSE 4+, Palo Alto PCNSA/PCNSE, Check Point CCSA, or Cisco CCNA/CCNP Security.
Framework Familiarity: ISO 27001/2, ISO 31000, NIST, COBIT, or ITIL v3.
Skills Required
- 1–3 years of proven experience in a dedicated security role within a large or complex environment
- Experience implementing IT security initiatives and conducting security risk assessments of critical IT systems and infrastructure
- Risk and compliance experience
- Knowledge of firewall and intrusion detection/prevention protocols
- Strong understanding of Windows, UNIX, and Linux operating systems
- Knowledge of identity and access management principles
- Understanding of secure network architectures
- Knowledge of risk and security standards, including ISO 27001, COBIT, and ITIL
- Tertiary qualification in information systems or an equivalent qualification
- Formal security qualification with a minimum of seven years of relevant IT security experience as an alternative qualification path
- Industry security certification such as CISSP, CISA, CISM, OSCP, CEH, SANS, or GIAC
- CCNA/CCIE Security
- Check Point Certified Security Associate CCSA R77
- Fortinet NSE 4 certification
- Palo Alto Networks PCNSE certification
- Palo Alto Networks PCNSA certification
- Excellent written, verbal, communication, and presentation skills
- Effective negotiation and problem-resolution skills
- Ability to work calmly under pressure and with minimal supervision
What We Do
Booth & Partners is a leading outsourcing and offshoring consulting firm that helps over 150 clients worldwide solve their talent and workspace challenges by specializing in building remote teams for startups and scaling businesses.
