Cybersecurity Analyst at First Ally Capital Limited

First Ally Capital Limited is seeking a skilled Cybersecurity Analyst to help protect its digital infrastructure, cloud environments, and sensitive business information. The successful candidate will monitor security events, identify and respond to cyber threats, strengthen cloud and endpoint security, and support compliance with industry security standards. This role is ideal for professionals with hands-on experience in Microsoft security technologies, Azure security services, and incident response.

Location: Lagos
Employment Type: Full-time

Key Responsibilities

• Monitor and investigate security alerts using Microsoft Sentinel, Microsoft Defender, Defender for Endpoint, and related Microsoft security solutions.
• Detect, analyze, and respond to cybersecurity incidents across Microsoft 365, Azure, endpoints, and business applications.
• Manage identity and access security through Microsoft Entra ID, Multi-Factor Authentication (MFA), Conditional Access, and Role-Based Access Control (RBAC).
• Conduct vulnerability assessments, track remediation efforts, and support patch management across cloud and on-premise environments.
• Collaborate with application development teams to strengthen application security and support secure software development practices.
• Assist with incident response activities, forensic investigations, and the maintenance of security documentation and response procedures.
• Support regulatory compliance initiatives, internal audits, and security policy implementation.
• Manage endpoint protection, email security, and device compliance using Microsoft Defender and Microsoft Intune.

Requirements

• Bachelor’s Degree in Computer Science, Cybersecurity, Information Security, or a related discipline.
• 3–5 years of practical experience in cybersecurity or information security roles.
• Strong knowledge of Microsoft 365 security tools, Microsoft Defender suite, Microsoft Purview, Microsoft Sentinel, and Azure security services.
• Experience with Microsoft Entra ID, Azure Policy, Defender for Cloud, and cloud identity management.
• Understanding of vulnerability management, application security, OWASP Top 10, API security, and endpoint protection.
• Familiarity with networking concepts including TCP/IP, DNS, VPNs, firewalls, and Zero Trust security principles.
• Working knowledge of Kusto Query Language (KQL), PowerShell, or other security automation tools is an advantage.
• Professional certifications such as Microsoft AZ-500, SC-200, CompTIA Security+, CEH, or equivalent are considered an added advantage.