Security analysts examine threats, alerts, and system activity to identify attacks, assess risk, and help organizations strengthen defenses.
Search across headline titles and summaries.
Background for this topic.
Security analyst is a cybersecurity role focused on identifying, assessing, and helping contain threats to an organization’s systems and information. Analysts review security alerts, logs, endpoint and network activity, and threat intelligence; investigate suspicious events; document findings; and recommend or apply defensive changes. Depending on the organization, the role may also include vulnerability management, security testing, control monitoring, or supporting security architecture and policy.
Analysts help turn security data into operational decisions: distinguishing benign activity from a likely compromise, prioritizing exploitable weaknesses, and escalating incidents with evidence for response teams. Their work commonly covers identities, cloud services, endpoints, applications, and network infrastructure, where misconfigurations or stolen credentials can create attack paths. Accurate investigation and careful handling of logs are important for preserving evidence and limiting exposure of personal or sensitive data. Analysts should also understand the organization’s risk requirements so that remediation, access changes, and reporting are proportionate and auditable.
Weekly headline count for the current query.
SentinelOne will present a threat-hunting demonstration during which a security analyst will compete against a non-technical person using its AI assistant
Kaspersky unveiled the cyber campaign at the Security Analyst Summit