Security Operations Analyst L1

Job Summary

Security Operations Analyst L1

Job Details

• IT Telecomms

• IT Security

• Mumbai

• Permanent / Full Time

  Highlights

• Opportunity to engage with clients to deliver great outcomes.

• Hybrid working environment.

• Join the largest Australian owned Systems Integrator.

  The Role

This is an entry-level technical role designed to give you hands-on experience in Security Operations. You'll work with senior analysts and engineers to deliver a range of network and cybersecurity services, while developing your skills across incident response, security tooling, and customer engagement. Your focus will be on learning, supporting, and assisting in the delivery of day-to-day security operations while gaining exposure to best-in-class tools and frameworks.

Role Responsibilities

• Monitor, analyze, and triage security alerts across Endpoint Detection Response (EDR/XDR), Email Security, Identity Management, and SIEM/SOAR platforms.

• Investigate security events and support incident response activities by following established processes and playbooks.

• Identify, assess, and document security incidents, ensuring accurate tracking and timely resolution.

• Create and maintain incident reports, operational procedures, knowledge articles, and lessons learned documentation.

• Assist in the deployment, configuration, and ongoing maintenance of security tools and controls.

• Escalate complex security incidents and critical issues to senior analysts and relevant stakeholders as required.

• Support continuous improvement initiatives to enhance security monitoring, detection, and response capabilities.

• Ensure adherence to organizational security standards and industry frameworks, including NIST Cybersecurity Framework, ISO 27001, and Essential Eight.

• Collaborate with internal teams to investigate threats, vulnerabilities, and security-related concerns.

• Contribute to maintaining a strong security posture through proactive monitoring and operational support.

  Key Competencies and Qualifications

• Endpoint Security Solutions: Familiarity with platforms such as SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Sophos, or Trend Micro Vision One.

• Email Security Technologies: Exposure to solutions including Mimecast, Proofpoint, and Exchange Online Protection (EOP).

• Identity Access Management (IAM): Basic understanding of Microsoft Entra ID (Azure AD), Multi-Factor Authentication (MFA), Conditional Access Policies, and identity security concepts.

• SIEM SOAR Platforms: Knowledge of security monitoring and automation tools such as Microsoft Sentinel, USM Anywhere, Securonix or similar security operations platforms.

• Incident Response Threat Frameworks: Familiarity with cybersecurity frameworks and methodologies, including NIST Incident Response (NIST IR) and the MITRE ATTCK framework.

• Security Monitoring Analysis: Understanding of security alerts, threat detection, event investigation, and incident triage processes.

• Cybersecurity Best Practices: Awareness of industry standards and frameworks such as NIST, ISO 27001, and the Essential Eight.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.