Cyber Analyst.

Cortex Consultants LLC; Chennai District; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Cortex Consultants LLC is looking for a Senior CyberSec Analyst for its Chennai office. You will monitor cybersecurity incidents, manage vulnerability programs, and respond to threats while collaborating across teams. Ideal candidates will have over 6 years of experience in Cyber Security, proficiency in tools like Splunk and Qualys, and strong scripting skills in Python and PowerShell. Join us to enhance our Cyber Security Operations and drive incident readiness and response improvement.

Qualifications

• 6+ years of experience in Cyber Security operations.
• Hands-on experience in threat detection and incident management.
• Proven track record in vulnerability management and risk assessment.

Responsibilities

• Monitor and respond to security incidents in real-time.
• Manage vulnerability detection and remediation processes.
• Develop and implement incident response strategies.

Skills

SIEM: Splunk, Microsoft Sentinel, QRadar, ELK

Incident Response & Threat Hunting

Vulnerability Management

Network Security

EDR & Email Security

Cloud Security: AWS, Azure, GCP

Scripting/Automation: Python, PowerShell, Bash

OS Security: Windows & Linux

Frameworks: MITRE ATT&CK

Education

Relevant Cyber Security Certifications (CISSP, CEH, etc.)

Tools

Qualys

Rapid7

Nessus

Wireshark

CrowdStrike

Job description

SME CyberSec Analyst (SOC / Vulnerability Management)

Experience: 6+ Years

Location: Chennai

About The Role

We are hiring a Senior Security Operations Engineer to strengthen our 24x7 Cyber Security Operations. You will drive threat detection, incident response, and vulnerability management while improving monitoring, automation, and response maturity across enterprise and cloud environments.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents (L2/L3)
• Lead and manage the Vulnerability Management program including asset discovery, scanning, risk‑based prioritization, remediation tracking, and reporting.
• Collaborate with IT and application teams to drive timely vulnerability remediation and SLA adherence.
• Develop and tune SIEM use cases, correlation rules, and dashboards.
• Lead incident response: triage, containment, eradication, and recovery.
• Perform proactive threat hunting using MITRE ATT&CK and threat intelligence.
• Integrate and analyze logs from EDR, firewalls, email, VPN, SASE, and cloud.
• Identify control gaps and recommend security improvements.
• Build/maintain playbooks, SOPs, and automate workflows (SOAR/scripts).
• Participate in on‑call rotation for critical incidents.

Core & Must‑Have Skills

• SIEM: Splunk, Microsoft Sentinel, QRadar, ELK (use case development & tuning)
• Incident Response & Threat Hunting: Hands‑on experience in detection and investigation
• Vulnerability Management: Strong hands‑on experience in end‑to‑end lifecycle including asset discovery, scanning (Qualys, Rapid7, Nessus), risk‑based prioritization, remediation tracking, and reporting
• Network Security: TCP/IP, DNS, HTTP; tools like Wireshark, Zeek, Nmap
• EDR & Email Security: CrowdStrike, Defender, SentinelOne, Proofpoint, Abnormal
• Cloud Security: AWS, Azure, GCP security monitoring & controls
• Scripting/Automation: Python, PowerShell, Bash
• OS Security: Strong in Windows & Linux
• Frameworks: MITRE ATT&CK, common attack vectors & TTPs

Good to Have

• Malware analysis (static/dynamic)
• SOAR platforms and automation pipelines
• Experience with SASE, DLP, IDS/IPS
• Exposure to forensics and APT investigations

Soft Skills

• Strong analytical and problem‑solving ability
• Clear communication with technical & business stakeholders
• Ability to prioritize and work in high‑pressure environments
• Experience working with global/onshore-offshore teams

Compliance & Certifications

• Familiarity with ISO 27001, GDPR, HIPAA
• Certifications preferred: CISSP, CEH, GCIA, CCSE