Cyber Security Analyst

About the role

The Cyber Security Analyst joins Lorex’s Cloud Technology & Security team to protect our smart home and business monitoring solutions. Reporting to the Director of Technology, you will ensure compliance with industry standards, conduct security assessments, and respond to incidents while collaborating across product, DevOps, and engineering teams.

Key responsibilities

• Conduct Threat and Risk Assessments, audits, and security reviews based on ISO 27001/2, SOC 2, NIST and GDPR.
• Perform vulnerability scans and security analysis of mobile apps (iOS/Android), cloud services, and embedded firmware.
• Partner with project teams to provide secure design guidance and validate secure configurations for Windows, Linux, macOS, AD, IDS/IPS, and SIEM platforms.
• Execute gap analyses against best‑practice frameworks and recommend remediation actions.
• Monitor infrastructure, security reports and metrics, and produce regular analytics.
• Respond to security incidents, applying containment and eradication techniques.
• Support disaster recovery and business continuity testing.
• Serve as an internal security consultant, integrating security requirements into development and DevOps pipelines.

Required profile

• Strong understanding of information security standards and regulatory requirements.
• Experience conducting security assessments and vulnerability scanning.
• Ability to work collaboratively with cross‑functional technical teams.
• Comfort with privacy considerations alongside security responsibilities.

Required skills

• ISO 27001/2
• SOC 2
• NIST framework
• GDPR compliance
• iOS and Android security testing
• Cloud services security
• Embedded firmware analysis
• Windows, Linux, macOS administration
• Active Directory
• IDS/IPS
• SIEM platforms
• Vulnerability scanning tools

What we offer

• Opportunity to work on innovative smart‑home security products.
• Collaborative environment with forward‑thinking engineers.
• Continuous learning and professional development in cutting‑edge security technologies.