Security Operations Analyst

Job Title: Security Operations Analyst

Location: Pune, India

About This Role:

The Security Operations Analyst is a key member of the information security team who ensures:

• Security tools operate effectively.
• Incidents are promptly detected, investigated, contained, and remediated.
• Vulnerabilities are promptly identified and remediated.

What you'll do:

• Monitor and administer a suite of best-of-breed security tools:

• Web Application Firewall (WAF) and Denial of Service Protection

• Endpoint Protection

• Endpoint Detection Response (EDR)

• Firewall and Network Intrusion Detection/Prevention (IDS/IPS)

• Identity Protection

• Brand Protection

• Cloud Security Posture Management

• Identity Protection

• Attack Surface Management

• AI Governance

• Pentesting

• Contain, remediate, and document reported security incidents.

• Perform threat and vulnerability assessments, maintain vulnerability metrics, and implement remedial actions required, including annual pentests.

• Contribute to Third Party Risk Management security and compliance evaluations of new and existing partners.

• Lead or participate in application and infrastructure security risk assessments and audits.

• Develop and maintain standard operating procedures for security playbooks and tools.

• Recommend and apply system and network hardening best practices.

• Evaluate and recommend new security software and technologies to address new threats.

What you'll need:

• Bachelor's degree or working toward a degree focused on cybersecurity or related experience.
• Knowledge of information security principles, security risk assessment, threat modeling, vulnerability management, incident response, and identity and access management.
• Knowledge of MITRE ATTACK, ISO 27001, OWASP Top Ten, and other security frameworks.
• Knowledge of network architecture concepts and protocols.
• Knowledge of Linux, Windows, and AWS infrastructure.
• Knowledge of scripting technologies (Python, Power Shell, Linux Shell).
• Experience with security tooling noted above or similar.
• Industry Certifications (e.g. CISSP, CompTIA/Security+/Linux+, CISA)
• Strong written and verbal communication skills.
• Strong analytical and problem-solving skills.
• Continuous improvement mindset.
• Collaborative work style.
• Strong customer/client focus, with the ability to manage expectations appropriately, provide a superior customer/client experience and build long-term relationships.
• Ability to work well under minimal supervision and be reliable.
• Ability to hold an incident response on-call shift to support Comscores 24x7 SOC which may include occasional weekend or after-hours coverage, when needed.
• Ability to work under stress and handle multiple high-pressure situations simultaneously.
• Ability to be available and contribute to work meetings during US hours (Pacific and Eastern Time mornings).

Shift Timing:

The regular hours for this position will cover a combination of business hours in the US and India typically 2PM-11PM IST. Occasionally, later hours may be required for meetings with teams in other parts of the world. Additionally, for the first 4-6 weeks of onboarding and training, US Eastern time hours (IST -9:30) may be required.