Cyber Security Analyst | Remote | Hybrid | In India

Company Overview

DigitalXnode assists clients across industries in connecting them with skilled and relevant talent for their technology and business requirements. We provide the best fit professionals in both hiring and staff augmentation types with the right expertise for different projects and engagement models across India, US, UK, Dubai and other countries.

Job Summary

We are looking for a proactive and detail-oriented Cyber Security Analyst to work with our client in India. The role focuses on security operations, threat monitoring, alert investigation, and incident response. The ideal candidate should have hands-on experience with Microsoft Sentinel and Microsoft Defender, along with a good understanding of cyber threats, email security, security monitoring, and SOC processes.

Key Responsibilities

Monitor, analyze, and respond to security events and alerts using Microsoft Sentinel and Microsoft Defender.

Investigate and triage security incidents, assess their impact, and recommend appropriate remediation actions.

Perform threat analysis and identify indicators of compromise (IOCs), suspicious activity, and emerging threats.

Monitor and investigate phishing, malware, ransomware, and other cyberattack attempts.

Analyze and respond to email security threats such as phishing attempts, spoofing attacks, and malicious email campaigns.

Assist with incident response processes, including threat containment, remediation, eradication, and recovery activities.

Perform log analysis and correlate security events from different tools and platforms.

Support threat detection and threat-hunting activities where required.

Work closely with IT and security teams to identify security improvements, optimize processes, and enhance overall security operations.

Maintain security documentation, incident reports, and operational runbooks.

Stay informed about current cybersecurity threats, vulnerabilities, attack techniques, and security best practices.

Participate in 247 security operations support through rotational shifts.

Required Technical Skills

25 years of experience in Security Operations, SOC, threat monitoring, or a related cybersecurity role.

Hands-on experience with Microsoft Sentinel SIEM.

Hands-on experience with Microsoft Defender XDR / Defender for Endpoint.

Experience with email security solutions.

Good understanding of the cyberattack lifecycle and current threat landscape.

Knowledge of malware, ransomware, phishing, and social engineering attacks.

Understanding of the MITRE ATT&CK Framework.

Knowledge of security incident management and incident response.

Experience with log analysis and event correlation.

Understanding of SIEM and EDR technologies.

Good understanding of network security fundamentals.

Knowledge of Identity and Access Management concepts.

Understanding of Windows security and basic Active Directory concepts.

Security Concepts

Security monitoring and alert triage.

Threat detection and threat hunting.

Vulnerability management awareness.

IOC and TTP analysis.

Email security best practices.

Security Operations Center (SOC) processes.

Preferred Technical Skills

Experience with threat hunting activities.

Basic scripting knowledge using PowerShell, KQL, Python, or Bash.

Exposure to Azure and Microsoft 365 security concepts.

Understanding of security compliance and governance frameworks.

Experience working with security operations runbooks and incident documentation.

Required Skills

Strong analytical and problem-solving ability.

Good verbal and written communication skills.

Ability to work effectively in a fast-paced SOC environment.

Ability to prioritize and manage multiple security incidents simultaneously.

Good attention to detail when investigating alerts and incidents.

Team-oriented approach with a continuous learning mindset.

Willingness to work in 247 rotational shifts.

AI Experience

No specific AI experience is required for this position. Knowledge of AI-assisted security analysis and security operations tools is desirable but optional.

Managerial Experience

Formal people-management experience is not mandatory. The role is primarily hands-on and focused on security monitoring, incident investigation, threat analysis, and SOC operations.

Operational Experience

Experience working in a Security Operations Center or similar security monitoring environment.

Experience handling security alerts, incidents, and escalations.

Experience maintaining incident records, reports, and operational runbooks.

Experience supporting rotational or 247 security operations.

Experience collaborating with IT, infrastructure, identity, and security teams.

Qualifications

UG: Any Graduate. A degree in Computer Science, Information Technology, Cybersecurity, or a related discipline is .