Join our pioneering Integrated Security Operations Center (ISOC) in Bengaluru as a Security Analyst. This role is ideal for a curious and detail-oriented individual eager to contribute to a 24x7 security monitoring environment. You will be instrumental in analyzing, investigating, and responding to security alerts across our diverse technology landscape.

As you grow with us, your responsibilities will expand to include incident response, enhancing detection capabilities, contributing to threat intelligence, and driving security improvement projects. This is an opportunity to shape a new security operations center while gaining invaluable hands-on experience.

Key responsibilities include:

- Vigilantly monitor and investigate security alerts from SIEM, EDR, identity, email, network, and cloud security platforms. - Correlate logs and evidence to accurately assess alert validity, severity, scope, and business impact. - Execute response playbooks, perform authorized containment and remediation actions, and escalate complex issues. - Maintain meticulous investigation records and ensure thorough shift handoffs. - Collaborate with security, IT, and business teams to resolve issues and enhance response effectiveness. - Support incident response by collecting evidence, developing timelines, and aiding in containment and recovery. - Contribute to post-incident reviews and the refinement of playbooks and operational procedures. - Identify recurring alert patterns and opportunities for workflow automation. - Assist in the development, testing, and tuning of detection rules to improve coverage and reduce false positives. - Review threat intelligence and apply it to investigations and detection improvements. - Support indicator validation and guided threat-hunting activities.

We are looking for candidates with:

- Foundational knowledge of security operations, common attack techniques, and incident investigation methodologies. - Familiarity with Windows, Linux, networking fundamentals, authentication protocols, and enterprise or cloud services. - Practical experience or exposure to security alerts, logs, and tools such as SIEM or EDR. - Strong analytical judgment and the ability to adhere to procedures while recognizing when escalation is necessary. - Excellent written and verbal communication skills, with a focus on clear documentation and effective cross-shift collaboration. - A willingness to work scheduled shifts, including nights, weekends, and public holidays. - Typically 1-4 years of relevant experience in security operations, incident response, IT operations, or a related field. Internships, labs, projects, or equivalent practical experience are highly valued. - A degree in cybersecurity, computer science, or a related field, or equivalent practical experience.