Senior Service Desk Analyst – Security Operations

We're Hiring: Senior Service Desk Analyst – Security Operations!

Location: Bangalore Urban, India

Work Mode: Work from Office

Role: Senior Service Desk Analyst – Security Operations

What You'll Do

• Advanced Threat Triage & Incident Escalation: Act as the primary escalation point for complex security anomalies, false‑positive tuning, and high‑priority alerts across multi‑cloud and hybrid environments.
• Endpoint Detection & Response (EDR/XDR Operations): Leverage platforms such as CrowdStrike Falcon and Microsoft Defender to investigate host activity, isolate compromised endpoints, review threat telemetry, and execute precise containment workflows.
• Behavioral Analysis & Anomaly Detection: Utilize Darktrace self‑learning AI and network telemetry to uncover sophisticated, stealthy, or unknown threats, analyzing behavioral shifts and unusual lateral movement across enterprise networks.
• Incident Lifecycle & Problem Management: Oversee the complete incident lifecycle for critical security alerts. Conduct comprehensive Root Cause Analysis (RCA) and forensic investigations to prevent recurring threat vectors and ensure strict SLA adherence.
• Identity & Access Security Integration: Partner with Identity teams to investigate identity‑based threats, suspicious authentications, and compromised credentials across Entra ID / Azure AD environments.
• Process Automation & Playbook Tuning: Evaluate existing security monitoring workflows to design, implement, and optimize detection rules, automated playbooks, and alert correlation logic across security tooling.
• Documentation & Threat Governance: Author and maintain advanced technical incident reports, forensic documentation, and standard operating procedures (SOPs) for internal team execution and client‑facing updates.
• Mentorship & Quality Oversight: Coach, train, and guide junior analysts. Perform quality assurance reviews on incident response documentation, communication clarity, and containment protocols.

What We're Looking For

• Bachelor’s degree in Cybersecurity, IT, Computer Science, Information Systems, Computer Engineering, or related field. Relevant technical diploma may be considered with strong cybersecurity experience.
• Minimum 5 years of hands‑on cybersecurity/SOC, security operations, or incident response experience, including 2+ years in an L2/Senior Analyst or equivalent role.
• Experience in a SOC, MSSP, or enterprise security environment preferred.
• Strong experience in alert triage, incident investigation, threat detection, containment, RCA, and escalation.
• Hands‑on experience with EDR/XDR, preferably CrowdStrike Falcon and/or Microsoft Defender XDR.
• Working knowledge of SIEM, Entra ID/Azure AD, endpoint/cloud security, IOCs, threat hunting, and incident response.
• Experience with detection tuning, automation/playbooks, and Darktrace or equivalent behavioral analytics is an advantage.
• Mandatory Certification: CompTIA Security+ or equivalent recognized cybersecurity certification.
• Preferred Certifications: CrowdStrike Certified Falcon Administrator
• Strong analytical, problem‑solving, communication, and documentation skills.
• Ability to independently handle complex incidents and mentor junior analysts

If you're ready to advance your career in Security Operations, join our dynamic team!