Information Security Analyst, Remote

About Crescent Cyber:

Our managed detection and response service is built on CrowdStrike, SentinelOne and Microsoft Defender. Nobody gets in trouble for clicking a test phish. You report it and move on.

About the role:

Crescent Cyber is hiring for the Information Security Analyst, Remote role to monitor, investigate and respond to security alerts across our environment.

What you'll do:

• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners.
• Review firewall, proxy, VPN and authentication logs for suspicious activity.
• Report on security awareness training and phishing simulation results.
• Help with user access reviews and offboarding audits.
• Write and update SOC runbooks and playbooks.
• Analyse reported phishing emails, check headers and URLs, and purge malicious messages.
• Escalate confirmed incidents and follow the incident response plan.

What you bring:

• 2+ years in an SOC, security analyst or IT security role.
• Clear written communication for incident tickets and reports.
• Experience reading Windows Event Logs, Sysmon and Linux logs.
• Basic scripting in PowerShell or Python.
• Working knowledge of SIEM and EDR tools.

Bonus points:

• Cloud log analysis (CloudTrail, Entra ID sign-in logs)
• Malware analysis in a sandbox.

Pay and benefits:

• Medical insurance.
• Provident fund.
• Paid leave.
• Fuel allowance.
• Two bonuses a year.

Candidates must be eligible to work in Pakistan.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Crescent Cyber.