Security Analyst (Cyber Defense Analyst)

Accountabilities:

• Monitor, triage, and investigate security alerts, telemetry, and log data across enterprise security platforms, including SIEM and other detection technologies.
• Analyze exploits, attacker behavior, suspicious activity, and anomalies across endpoint, identity, network, cloud, and application data sources.
• Correlate security events within the SIEM to identify potential threats, validate detections, and support incident declaration and escalation decisions.
• Document investigation findings, evidence, response activities, and incident status throughout the incident lifecycle, ensuring clear and timely communication.
• Conduct proactive threat hunting and threat research to identify emerging risks, adversary techniques, and gaps in detection coverage.
• Contribute to detection engineering and response automation initiatives that improve monitoring, investigation, and containment capabilities.
• Support the operation and effectiveness of core security technologies by maintaining their reliability, visibility, and defensive capabilities.
• Help develop and refine incident response processes, playbooks, workflows, and operational procedures.
• Communicate intrusion activity, incident details, threat trends, and recommended actions clearly to leadership and internal stakeholders.
• Partner with infrastructure teams and system owners to review vulnerability findings, prioritize high-risk remediation, and track issues through closure.
• Contribute to information security projects and continuous improvement initiatives that strengthen the organization's overall security posture.

Requirements:

• 5+ years of professional experience in information security, ideally with direct experience in incident response, cyber defense, or security operations within a corporate or enterprise environment.
• Hands-on experience with SIEM platforms, including searches, dashboards, alerts, event correlation, and investigations; experience with CrowdStrike NG-SIEM is strongly preferred.
• Experience with Microsoft 365 security technologies, particularly Microsoft Defender XDR for email, identity, and collaboration environments.
• Working knowledge of networking fundamentals and cloud environments, including AWS and Azure.
• Foundational knowledge of Windows and macOS operating systems.
• Strong written and verbal communication skills, including the ability to document incidents clearly and explain technical findings to non-technical stakeholders.
• Familiarity with security frameworks such as MITRE ATT&CK, NIST CSF, and CIS Controls is preferred.
• Basic scripting or query-language knowledge, such as PowerShell or Python, to support security analysis and automation is preferred.
• Experience supporting vulnerability management with tools such as Tenable and Wiz, including triage, validation, prioritization, and remediation tracking, is preferred.
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline.
• A cybersecurity certification such as CCSP, GCIH, CySA+, GSEC, SSCP, or an equivalent credential is required.
• Strong analytical, problem-solving, follow-up, and quality-assurance skills, combined with the ability to remain effective in a fast-paced environment.
• Collaborative and professional approach, with the ability to work effectively with colleagues and stakeholders at different levels of an organization.

Benefits:

• Comprehensive health insurance for employees, with options to extend coverage to eligible dependents.
• Paid time off and company holidays, plus additional leave benefits according to company policy.
• Flexible work arrangements designed to support work-life balance.
• Learning and development opportunities, including support for continuous technical growth and upskilling.
• Opportunities to pursue professional certifications and credentials as part of ongoing career development.
• Employee wellness initiatives supporting physical and mental well-being.
• Retirement and statutory benefits in accordance with applicable Indian regulations.
• An inclusive, collaborative, and people-first culture that encourages ownership, learning, and diverse perspectives.
• Exposure to modern security technologies and opportunities to contribute to enterprise-wide cybersecurity initiatives.