Analyst II, Cybersecurity

FIS; Gurugram District; On-site; INR 700,000 - 1,200,000; Full time

Benefits offered by this job

Competitive salary

Professional education and personal development

Career development tools and resources

Job summary

FIS is seeking a security engineer to design and develop automation solutions within SOAR ecosystems. The role focuses on improving security operations through enhanced automation, interfacing with various security tools and platforms. Ideal candidates will have significant experience in security engineering and knowledge of programming for automation.

This position offers opportunities for professional growth and a competitive salary. FIS emphasizes a collaborative work environment with a commitment to innovation.

Qualifications

• 3-7 years of experience in security engineering or SOC automation.
• Proficiency in Python or scripting languages for automation.
• Demonstrated experience designing and deploying security automations.

Responsibilities

• Design and maintain automation for log ingestion and transformation.
• Engineer and deploy automated detections in SOAR environments.
• Integrate SOAR with SIEM, EDR, threat intelligence platforms.

Skills

Security engineering

SOC automation

Python scripting

Incident response

Automation development

API integration

Cloud environments

Education

Bachelor's degree in computer science or related field

Tools

SIEM

EDR

ServiceNow

Jira

Job description

What You Will Be Doing:

• Design, develop, and maintain automation for log ingestion, normalization, enrichment, and transformation across diverse data sources and formats, with strong data quality controls.
• Engineer, test, deploy, and maintain automated detections in SOAR ecosystems, including rule/playbook development, tuning, and lifecycle management to reduce false positives.
• Integrate SOAR with SIEM, EDR, threat intelligence, and ITSM platforms (e.g., Microsoft Sentinel, LogRhythm, CrowdStrike, ServiceNow) using APIs and webhooks.
• Automate case and ticket lifecycle management, including creation, enrichment, correlation, de‑duplication, SLA tracking, and closure in systems such as ServiceNow, Jira etc.
• Monitor and improve automation reliability and performance using metrics, logging, alerting, and SLOs; maintain runbooks and on‑call support documentation.
• Collaborate with SOC analysts, incident responders, and threat intelligence teams to translate manual procedures into resilient automations to support metrics such as MTTD, alert fidelity, and response consistency.
• Ensure secure development and operational practices, including least‑privilege access, secrets management, audit‑ability, and compliance with data handling policies.
• Document architecture, detection logic, playbooks, and runbooks; supply to knowledge sharing and enablement across the team.
• Support platform migrations, upgrades, and architectural improvements for SOAR environments.

What You Bring:

• Bachelor’s degree in computer science, Information Security, or equivalent practical experience.
• 37 years of experience in security engineering, SOC automation, or security operations roles.
• Demonstrated experience building and operating production‑grade SOAR automations.
• Good understanding of cybersecurity concepts, including incident response, and vulnerability management.
• Experience with security tools and technologies such as SIEM, EDR and firewalls.
• Proficiency in Python (or another scripting language such as PowerShell, BASH etc.) for development, testing, and automation of security and infrastructure workflows.
• Demonstrated experience designing and deploying security automations and SOAR playbooks in platforms such as TORQ, Google SecOps SOAR (Formerly known as Chronicle), Cortex XSOAR etc.
• Familiarity with SIEM and EDR platforms such as Crowdstrike, Microsoft Sentinel, or Qradar, including detection content development and tuning.
• Familiarity with cloud environments (Azure, GCP) and SaaS security tooling.
• API integration patterns including REST/GraphQL, webhooks, OAuth 2.0, and JSON serialization.
• Ability to work cross‑functionally with SOC analysts, detection engineers, ITSM, and platform teams.
• Strong understanding of SOC workflows, incident response lifecycle, and alert triage.
• Strong problem resolution/analytical skills required to understand complex system interactions.
• Strong work prioritization, planning, and organizational, documentation and troubleshooting skills.
• Project and assignment management.

What We Offer You:

A multifaceted job with a high degree of responsibility and a broad spectrum of opportunities.

A broad range of professional education and personal development possibilities. FIS is your final career step!

A competitive salary and benefits.

A variety of career development tools, resources and opportunities.