Security Analyst III

Deepwatch is a leader in managed security services protecting organizations from cyber threats 24/7/365. As a Security Analyst III, you will act as an escalation point for alert triage and incident response within the Security Operations Center, investigating suspicious events using SIEM and SOAR technologies while supporting the company's rapid expansion into India.

What You'll Do

• Act as an escalation point for alert triage across security technologies and multiple platforms including Windows, Linux, and macOS
• Validate suspicious events by performing in-depth investigations using SIEM and SOAR platforms, particularly Splunk
• Leverage Deepwatch proprietary tooling, OSINT, TTPs, and IOCs to analyze and resolve security incidents
• Collaborate directly with leadership and customers to identify, highlight, and resolve security concerns
• Provide investigative support to analysts, train team members, and produce high-quality written and verbal communications with actionable recommendations

What You Need

• 5+ years of hands-on experience in a cybersecurity or SOC environment
• 5+ years of hands-on experience with Splunk SIEM, including ability to perform queries and leverage various log sources for investigations
• Proven experience in incident response and threat hunting
• Strong understanding of cybersecurity principles and comprehensive knowledge of Splunk SIEM with ability to navigate alternative platforms such as Google SecOps or Microsoft Sentinel
• Working knowledge of modern EDR tools such as CrowdStrike and SentinelOne, email security, and cloud identity platforms
• Advanced knowledge of Adversary Tactics, Techniques & Procedures (TTP), Event Logging, and Event Triage
• Hands-on experience with enterprise ticketing systems such as ServiceNow or Jira
• Ability to work independently and meet strict operational SLAs while maintaining transparent communication with peers and leadership

Nice to Have

• Google SecOps and Microsoft Sentinel experience
• Certifications: Security+, CySA+, GCSA, or GCIH
• Experience in an MDR or MSSP environment
• Ability to pivot across multiple log sources, cloud systems, and consoles for comprehensive analysis

Competitive compensation and equity package; comprehensive health insurance, accidental insurance, term life insurance, wellness programs, OPD coverage, and gym support