CyberSecurity Analyst - Senior

Role: Cybersecurity Analyst - Senior

Experience Required : 9 to 14 Years

Location : Pune

Job Purpose

• The candidate will be responsible for ensuring the security of our organization's information assets by monitoring and analyzing security events, responding to security incidents, and proactively identifying and mitigating potential security risks.
• The candidate should have experience with SIEM, Vulnerability scanning & remediation, knowledge of IPS/IDS logs, SOAR, malware and botnet, phishing attacks, Trellix endpoint security, Cloud Security, FortiAnalyzer and Zscaler internet security.
• This role requires a strong technical aptitude and excellent communication skills.

Key Tasks & Responsibilities

• Monitor and analyze security events from various sources, support with Splunk for optimization of security monitoring.
• Perform vulnerability scanning with Nessus and other security assessment tools to identify potential security risks and make recommendations for remediation.
• Respond to security incidents, including malware and botnet detection, phishing attacks, and other security breaches.
• Conduct behavior analysis to identify and mitigate potential insider threats.
• Coordinate with cross-functional teams to develop and implement security policies and procedures.
• Evaluate and recommend security solutions to ensure the confidentiality, integrity, and availability of organization's information assets.
• Fundamental knowledge of Azure, AWS, TCP/IP, IP subnet & secure protocols.
• Stay current with the latest security threats and trends and support within team on emerging risks.

Must Have

At least 3 years of hands-on experience in IT security incident response and management (preferably in a Security Operations Center (SoC) environment, having the following skills:

• Hands-on experience on EDR, SOAR, IPS, SIEM, & Vulnerability scanning
• Cloud-Native Application Protection Platform (CNAPP)
• Web proxy

Tools

• Splunk, Nessus, IPS/IDS logs, IBM QRadar, ORCA, Trellix endpoint security, VMRay, FortiAnalyser and Zscaler internet security.
• Aware of OSINT tools for- Behavior analysis, malware and botnet detection, phishing validation.

Good to have

• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Relevant security certifications such as CompTIA Security+, GIAC Certified Incident Handler (GCIH), or Certified Information Systems Security Professional (CISSP) are preferred.
• Familiarity with security frameworks such as NIST, ISO 27001, and CIS Controls.