Senior Security Analyst

• Position: Senior Security Analyst
• Experience: 4+ Years
• Work Mode: Hybrid/ Work From Office
• Location: Hyderabad
• Shift Timings: 24/7(rotational shifts including night shifts)

Roles and Responsibilities:

• Works as part of a Cyber Defense team that works 24/7 on rotational shifts.
• Continuously monitor and respond to advanced threats and evolving attack vectors across multiple environments
• Perform in-depth investigation and triage of security alerts to determine root cause, impact, and relevance.
• Correlate alerts and telemetry from SIEM and log sources like EDR, IPS, Firewall and threat intelligence platforms to identify real threats.
• Handle detections targeting cloud infra/services/applications.
• Provide recommendations for containment, mitigation, and recovery to client or internal response teams.
• Contribute to the development and fine-tuning of detection rules, analytics, and use cases to enhance threat visibility and strength overall defense posture.
• Collaborate closely with Threat Intelligence, SOAR, and Engineering teams for enrichment and contextual analysis.
• Document investigations, findings, and recommendations in accordance with SOC SOPs and reporting standards.
• Serve as a subject matter expert on detection and response methodologies, including SIEM, SOAR, threat intelligence, log analysis, network and EDR telemetry, and other response techniques.
• Develop and maintain accurate documentation which includes SOPs, playbooks, runbooks and SOC operational procedures.
• Mentor and guide junior analysts, foster a culture of continuous learning and operational excellence and ensure adherence to operational quality benchmarks and SLAs.

Minimum Requirements:

• 4+ years of experience in incident response, SOC Tier 2 or equivalent.
• Strong understanding of adversary tradecraft (MITRE ATT&CK, Cyber Kill Chain, etc.).
• Deep understanding of cloud security concepts.
• Experience with EDRs, SIEMs, SOARs and log pipelines.
• Solid grasp of Windows, Linux, and cloud security.
• Familiarity with scripting languages for analysis.
• In-depth understanding of network protocols, endpoint artifacts, memory, and log analysis.
• Excellent problem-solving and analytical thinking.
• Ability to work under pressure during incidents and with minimal supervision.
• Strong documentation and communication skills, especially when dealing with stakeholders.
• Collaborative, yet capable of deep focus and individual contribution.

Preferred Education and Certifications:

• Bachelor's degree or relevant qualification Cybersecurity, Information Technology, or a related field
• Certifications: GCIH, GIAC, CEH, Microsoft Security Operations Analyst (SC-200), or equivalent.