Security Analyst

Mode : Work from office for 5 days

Shifts : Rotational

Interview Mode : Virtual/F2F (2 Technical Rounds)

Position Overview

We are seeking a highly skilled and motivated Security Operations Center (SOC) Security Analyst to join our cybersecurity team. The successful candidate will be responsible for monitoring security alerts, conducting real-time incident triage, and leading deep-dive investigations to protect our infrastructure from sophisticated cyber threats.

Key Responsibilities

• Monitor security alerts and events from various sources including SIEM, EDR, IDS/IPS, and cloud security platforms.
• Conduct real-time and retrospective security event analysis to identify suspicious behavior and potential threats.
• Execute initial triage and in-depth investigation of security incidents.
• Develop and maintain incident response procedures, threat detection use cases, and runbooks.
• Collaborate with internal teams to investigate security events, perform root cause analysis, and implement corrective actions.
• Participate in threat hunting activities and contribute to the enhancement of detection capabilities.
• Support tuning and maintenance of SIEM rules, alerts, and dashboards.
• Manage SOC documentation and reporting requirements.
• Stay current with the latest cybersecurity threats, trends, tools, and best practices.
• Participate in security assessments and audits as required.

Requirements & Qualifications

• Strong understanding of network protocols, operating systems (Windows, Linux), and cloud environments (Azure, GCP, AWS).
• Practical experience with SIEM tools -Azure Sentinel.
• Familiarity with threat intelligence platforms, endpoint detection and response (EDR), and malware analysis.
• Solid grasp of common attack vectors, tactics, and techniques.
• Comprehensive knowledge of incident response methodologies.
• Proven ability to analyze logs from various sources and correlate events for meaningful insights.
• Strong analytical and problem-solving skills with the ability to work under pressure during critical incidents.
• Good written and verbal communication skills for technical documentation and incident reporting.