Chief Analyst, Cyber Security Operations

SES S.A Brazil; Chennai District; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

SES S.A Brazil is seeking a Chief Analyst for Cyber Security Operations in Chennai, India. You will own security monitoring, incident response, forensics and threat hunting across SIEM, EDR, SOAR and cloud environments.

Lead complex investigations, drive automation and mentor analysts to improve detection and response capabilities. The role requires 6–10 years in cyber security operations, strong malware analysis and reverse engineering skills, and the ability to coordinate with cross-functional

Qualifications

• Bachelor's degree or equivalent professional experience in cyber security or related field.
• 6–10 years of experience in Cyber Security Operations or related disciplines.
• Strong hands-on experience with SIEM, SOAR, EDR, security monitoring and detection engineering.
• Expertise in malware analysis, forensics and incident investigation.
• Experience leading complex security incidents and threat intelligence use.

Responsibilities

• Own and improve security monitoring across SIEM, EDR, SOAR and related platforms.
• Lead design and tuning of detection use cases across environments.
• Drive improvements in detection logic, alert quality and runbooks.
• Mentor the Cyber Security Operations team and develop training materials.
• Lead advanced malware investigations and reverse engineering activities.
• Coordinate vulnerability management and risk assessment processes.
• Share threat intelligence with internal and external stakeholders.

Skills

Scripting

Incident response

Threat hunting

Malware analysis

Digital forensics

Security operations

Education

Bachelor's degree in Cyber Security, Computer Science, Information Technology or related field

Tools

SIEM

SOAR

EDR

Windows security

Linux security

Job description

Chief Analyst, Cyber Security Operations

Requisition Number: 20309

Contract Type: Permanent

Location(s): Chennai, IN

Chief Analyst, Cyber Security Operations

Primary Responsibilities / Key Results Areas

Security Monitoring, Detection Engineering and Threat Hunting

• Own and continuously improve security monitoring capabilities across SIEM, EDR, SOAR and related security platforms.
• Lead the design, implementation, tuning and lifecycle management of detection use cases to improve visibility across endpoint, network, cloud, identity and application environments.
• Drive improvements in detection logic, correlation rules, log onboarding, alert quality and operational runbooks to ensure effective and actionable monitoring.
• Partner with technology teams to onboard and validate security telemetry and support proactive threat hunting activities using threat intelligence, attacker techniques and operational insights.

Incident Response and Technical Leadership

• Act as the lead technical authority for high-impact and complex security incidents.
• Manage investigations from initial triage through containment, eradication, recovery and post-incident review while ensuring timely, coordinated and effective response actions.
• Provide expert guidance during critical incidents, support the on-call function, and continuously improve incident response processes, playbooks, escalation paths and operational readiness.

Digital Forensics, Malware Analysis and Reverse Engineering

• Lead advanced technical investigations across Windows, Linux, cloud and enterprise environments.
• Conduct and oversee digital forensic activities, including evidence preservation, collection, analysis and interpretation.
• Provide hands‑on expertise in malware analysis, malware deconstruction and reverse engineering.
• Analyse suspicious files, identify attacker techniques and indicators of compromise, and translate findings into improved detections, threat intelligence, containment strategies and analyst training.
• Serve as the technical lead for complex malware investigations and guide analysts through advanced forensic and reverse engineering activities when required.

Security Operations Maturity and Automation

• Drive the continuous improvement of Cyber Security Operations capabilities, processes and tooling.
• Own the lifecycle of automation playbooks and use cases to improve efficiency, scalability and response effectiveness.
• Automate and optimise security operations platforms, including SIEM, SOAR, EDR, sandboxes and forensic tooling.
• Use scripting and automation to reduce manual effort, accelerate investigations and improve operational outcomes.

Vulnerability Management and Technical Risk Review

• Support and enhance the vulnerability management program by identifying, prioritizing and tracking vulnerabilities across systems, applications and services.
• Provide technical risk assessments, remediation guidance and vulnerability prioritization based on exploitability, threat intelligence, business impact and asset criticality.
• Support vulnerability review forums, remediation tracking and compliance‑related activities.

Threat Intelligence and Security Improvement

• Collect, analyse and operationalise threat intelligence from incidents, malware investigations, threat feeds and other relevant sources.
• Ensure intelligence is transformed into actionable improvements across monitoring, detection engineering, incident response, threat hunting and vulnerability management.
• Share relevant intelligence with internal stakeholders and external partners where appropriate.

Analyst Development and Knowledge Transfer

• Act as a technical mentor and role model for the Cyber Security Operations team.
• Coach analysts during investigations, improve investigation quality standards and support consistent technical practices across the team.
• Develop training material, knowledge articles, operational guidance and structured learning programmes.
• Lead by example through hands‑on technical work while helping analysts build expertise in incident response, forensics, malware analysis, detection engineering and security operations technologies.

Documentation and Stakeholder Engagement

• Create and maintain policies, procedures, playbooks, runbooks and technical documentation that support Cyber Security Operations activities.
• Work closely with stakeholders across the organisation to communicate risks, investigation findings and remediation recommendations.
• Translate complex technical issues into clear and actionable information for both technical and non‑technical audiences.
• Strong analytical and problem‑solving skills with the ability to lead complex technical investigations.
• High degree of autonomy, ownership and technical leadership.
• Excellent incident coordination, stakeholder management and communication skills.
• Strong focus on continuous improvement, automation and operational excellence.
• Ability to manage multiple priorities and perform effectively under pressure.
• Excellent mentoring, coaching and knowledge‑sharing capabilities.
• Strong collaboration skills and the ability to influence stakeholders across the organisation.

Qualifications and Experience

Required

• Bachelor's degree in Cyber Security, Computer Science, Information Technology or a related field, or equivalent professional experience.
• 6–10 years of experience in Cyber Security Operations, Incident Response, Digital Forensics, Detection Engineering or related disciplines.
• Strong hands‑on experience with SIEM, SOAR, EDR, security monitoring, alert triage and detection engineering.
• Advanced expertise in Windows and Linux security, incident investigation and digital forensics.
• Proven experience leading complex or high‑impact security incidents.
• Strong experience in malware analysis, malware deconstruction and reverse engineering.
• Experience with vulnerability management, threat intelligence and technical risk assessment.
• Knowledge of cloud, network, application, endpoint and identity security.
• Scripting or programming experience using languages such as Python, PowerShell, Bash, SQL or C/C++.
• Ability to participate in an on‑call rotation and support critical incident response activities.

SES and its Affiliated Companies are committed to providing fair and equal employment opportunities to all. We are an Equal Opportunity employer and will consider all qualified applicants for employment without regard to race, color, religion, gender, pregnancy, sex, sexual orientation, gender identity, national origin, age, genetic information, protected veteran status, disability, or any other basis protected by local, state, or federal law.