Job Description:
We are looking for a skilled Cybersecurity Analyst with 2–5 years of experience in information security, security operations, threat detection, vulnerability management, and incident response. The ideal candidate should have hands-on experience with security monitoring tools, SIEM platforms, endpoint protection solutions, network security, and cloud security.
The candidate will be responsible for identifying potential security threats, investigating security incidents, implementing security controls, monitoring enterprise systems, and ensuring the confidentiality, integrity, and availability of organizational data and infrastructure.
Key Responsibilities:
- Monitor, identify, analyze, and respond to cybersecurity threats and suspicious activities across enterprise IT environments.
- Perform security event monitoring, alert triage, incident investigation, and escalation.
- Work with SIEM tools to analyze security logs, identify anomalies, and detect potential threats.
- Conduct vulnerability assessments, security audits, and risk assessments.
- Investigate phishing attacks, malware, ransomware, unauthorized access, and data breaches.
- Monitor endpoint security solutions, firewalls, IDS/IPS, and network security systems.
- Perform threat hunting and analyze Indicators of Compromise (IOCs).
- Support incident response activities, including containment, eradication, recovery, and root cause analysis.
- Implement and maintain security policies, procedures, and access controls.
- Monitor cloud infrastructure and identify potential security misconfigurations.
- Work with IT, infrastructure, network, and application teams to resolve security vulnerabilities.
- Prepare security incident reports, documentation, dashboards, and compliance reports.
- Follow industry security frameworks, standards, and best practices.
- Required Technical Skills & Tools
- SIEM & Security Monitoring: Splunk, Microsoft Sentinel, IBM QRadar, ArcSight, ELK Stack.
- Endpoint Security (EDR/XDR): CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, Carbon Black.
- Network Security: Palo Alto, Fortinet FortiGate, Cisco Firewalls, Check Point, IDS/IPS, Wireshark, Nmap.
- Vulnerability Management: Tenable Nessus, Qualys VMDR, Rapid7 InsightVM, OpenVAS.
- Cloud Security: Microsoft Azure, AWS, or GCP; knowledge of IAM, cloud monitoring, security policies, and threat detection.
- Operating Systems: Windows 10/11, Windows Server 2019/2022/2025, Linux (Ubuntu/RHEL).
- Networking Fundamentals: TCP/IP, DNS, DHCP, HTTP/HTTPS, VPN, SSL/TLS, firewalls, and network protocols.
- Scripting & Automation: Python, PowerShell, Bash/Shell scripting, REST APIs, JSON.
- Security Frameworks: NIST CSF, ISO 27001:2022, MITRE ATT&CK, CIS Controls, OWASP Top 10.
- Security Technologies: IAM, MFA, SSO, PAM, DLP, SOAR, threat intelligence, threat hunting, and incident response.
- Cloud & DevSecOps (Preferred): Docker, Kubernetes, CI/CD security, and cloud-native security fundamentals.
Required Skills:
- Knowledge of network and cloud security.
- Experience with SIEM tools.
- Understanding of threat detection and incident response.
- Knowledge of Windows and Linux security.
- Strong analytical and problem-solving skills.
Qualification:
- Bachelor's Degree (B.E./B.Tech/B.Sc.) in Computer Science, Information Technology, Cybersecurity, Information Security, Electronics, or a related technical discipline.
- Master's Degree (M.E./M.Tech/M.Sc./MCA) in Cybersecurity, Computer Science, Information Technology, or Information Security is preferred but not mandatory.
- Equivalent relevant technical education and industry experience may also be considered.
Experience:
- 2–5 years of hands-on experience in Cybersecurity, Information Security, SOC Operations, or Security Analysis.
- Practical experience with at least one SIEM platform and one endpoint security/EDR solution.
- Understanding of security incident management, threat detection, and vulnerability management.
- Knowledge of cloud security fundamentals across Azure, AWS, or GCP.
- Strong understanding of networking, operating systems, and security protocols.
- Good analytical, troubleshooting, and problem-solving abilities.
- Strong verbal and written communication skills.
- Ability to work independently and collaboratively with cross-functional teams.
Preferred Certifications:
- CompTIA Security+
- CompTIA CySA+ (Cybersecurity Analyst)
- Certified Ethical Hacker (CEH)
