Cyber Resiliency Engineer

Jaggaer; Hyderabad; Hybrid; INR 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Health insurance

Accidental Insurance

Term Life

Job summary

JAGGAER, based in Hyderabad, India, is seeking a Cyber Security Analyst to join its Security Operations Centre. The role covers day-to-day threat analytics, security event triage, investigation, and incident response across on‑premise and cloud systems in a small, collaborative team.

You will have opportunities to own a specialism as you grow. The position emphasizes collaboration, documentation in Jira, and aligning investigations with production incidents.

Qualifications

• 3+ years in cybersecurity with hands-on security operations.
• Understanding of Windows and Linux security controls.
• Knowledge of threat-actor techniques, malware behavior, and persistence.
• Hands-on experience with CrowdStrike Falcon: alert triage, investigation, containment.
• Experience with SIEM platforms and NGSIEM or similar.
• Experience using AI tools to support security tasks with caution on sensitive data.
• Structured, evidence-based investigation approach with clear communication.
• Ability to work in a close-knit, collaborative team.

Responsibilities

• Triage security escalations from MDR and internal sources.
• Investigate incidents to determine scope, impact, and root cause.
• Contain, respond to, and document security incidents.
• Correlate activity across CrowdStrike NGSIEM, Observe, Defender; hunt for anomalies.
• Phishing response and takedown of malicious domains and leaked credentials.
• Align SOC investigations with production incidents to avoid coverage gaps.
• Document investigations in Jira and IR records; perform daily checks and handovers.
• Provide feedback to improve detection and tuning.

Skills

Security operations

Incident response

Threat intelligence

CrowdStrike Falcon

SIEM

AI-assisted security

Written and verbal communication

Team collaboration

Tools

CrowdStrike Falcon

NGSIEM

Microsoft Defender

PhishER

KnowBe4 PhishER

Job description

Overview

About JAGGAER JAGGAER provides an intelligent Source-to-Pay and Supplier Collaboration Platform that empowers organizations to manage and automate complex processes while enabling a highly resilient, responsible, and integrated supplier base. With 30 years of expertise, we specialize in solving complex procurement and supply chain challenges across various industries. Our 1,300+ global employees are obsessed with ensuring customers get full value from our products—ultimately enhancing and transforming their businesses. For more information, visit www.jaggaer.com

Cyber Security Analyst

The Role Reporting to the Manager, IR & Assurance, the Cyber Security Analyst is a core member of the JAGGAER Security Operations Centre (SOC). The analyst shares the day-to-day threat analytics, security event triage, investigation, and incident response that protect JAGGAER's corporate and production environments across on-premise and cloud systems. This is a hands-on mid-level operational role. The analyst works as part of a small, close-knit team where everyone shares the core SOC responsibilities. As the analyst develops, they may take ownership of a specialism (for example threat intelligence, threat hunting, or incident response) at approximately 20% of their time, on top of the shared core. This role is based in Hyderabad, India, with hybrid working, and operates within standard working hours.

Principal Responsibilities

Core Responsibilities (Shared by All Analysts)

• Alert triage — Triage and validate security escalations from CrowdStrike Falcon Complete (MDR) and internal sources, prioritising by severity and logging a clear outcome for each.
• Investigation — Investigate confirmed and suspected incidents to establish scope, impact, and root cause, using structured, evidence-based methodology.
• Incident response — Contain, respond to, and document security incidents in line with the Incident Response Procedure — isolating hosts, blocking indicators, and coordinating remediation.
• Correlation & hunting — Correlate activity across CrowdStrike NGSIEM, Observe and the endpoint tooling (CrowdStrike Falcon and Microsoft Defender), using Zscaler VPN data for IP and connection analysis, and hunt for anomalies not surfaced by automated detection (failed logons, privilege escalation, new admin accounts).
• Phishing response — Review and action user-reported phishing (including via PhishER), confirm remediation, and initiate takedowns of malicious domains and leaked credentials.
• Production alignment — Align SOC investigations with security-related production incidents to ensure no coverage gaps between operations and security.
• Detection support — Feed investigation findings, including false positives and coverage gaps, back to the team to inform detection tuning.
• Documentation — Maintain accurate, complete records in Jira and the IR record for all work, and complete daily operational checks and handover.

Position Requirements

What You Will Bring

Essential

• 3+ years' experience in, or closely related to, the cybersecurity field, with hands‑on security operations experience.
• Understanding of Microsoft Windows and Linux/Unix system‑level security controls.
• Understanding of common threat‑actor techniques, malware behaviour, and persistence mechanisms.
• Hands‑on experience with the CrowdStrike Falcon platform, including alert triage, host investigation and response actions such as containment.
• Practical experience with SIEM platforms, including alert triage, event investigation, and documentation. CrowdStrike NGSIEM or comparable technology.
• Practical experience using AI tools to support security work, such as summarizing alerts, drafting queries or analyzing logs, with the judgement to verify output and to keep sensitive data out of unapproved tools in line with company policy.
• Structured, evidence‑based investigation approach with clear written and verbal communication.
• Ability to work as part of a close‑knit team, sharing the core workload and supporting colleagues.

Desirable

• Experience with the MITRE ATT&CK framework and threat intelligence in operational practice.
• Familiarity with CrowdStrike NGSIEM, including CQL query writing, log ingestion concepts and detection rule structure.
• Experience working alongside a managed detection and response (MDR) provider.
• Experience with Microsoft Defender, Mimecast or phishing‑response tooling such as KnowBe4 PhishER.
• Scripting (Python or PowerShell) to automate repetitive triage tasks.
• Familiarity with cloud environments (Azure, O365, AWS).
• Interest in developing a specialism (CTI, threat hunting, or IR).
• Relevant industry certifications held or in progress — for example CompTIA Security+, Blue Team Level 1 (BTL1), or ISC2 Certified in Cybersecurity (CC). Professional membership (ISC2, ISACA) is welcomed.
• Red/Blue team exposure.

How You Will Grow

The Cyber Security Analyst role sits on a clear progression path: Cyber Security Analyst → Senior Cyber Security Analyst → Lead Cyber Security Analyst, aligned to the NIST NICE and ENISA ECSF frameworks. Progression is evidence‑based. Analysts are encouraged to develop a specialism as they grow, held as additional ownership alongside the shared core.

What We Offer:

At JAGGAER, we are committed to supporting you and your family’s well‑being. Your health is a priority, and we offer a range of programs to help you stay well and thrive. Our benefits include Health, Accidental Insurance, and Term Life.

Our Values - T.E.A.M:At JAGGAER, our business is about people. Our products are built on intellectual property, but the real differentiator is the teams behind them–the way we collaborate, innovate, solve problems and deliver for customers. TEAM gives us a common set of expectations for how we work together across products, cultures, and geographies.

• Transparency - Openness Builds Trust: Candor strengthens relationships, speeds decision‑making, and ensures problems are solved together—with customers, teammates, and partners.
• Entrepreneurial Spirit – Own It, Drive It, Make It: A scrappy, customer obsessed, problem‑solving mindset is at the cornerstone of both organizational and personal growth
• Accountability – Thumbs In, Not Fingers Out: We take responsibility ourselves before pointing elsewhere
• Metrics-Driven Results – Outcomes Over Activities: Data and evidence guide our decisions, help us course‑correct quickly, and ensure we’re delivering real impact.

EEO: JAGGAER is a proud equal opportunity/affirmative action employer supporting workforce diversity. We do not discriminate based upon race, ethnicity, ancestry, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), marital status, caregiver status, sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, genetic information, military, or veteran status, mental or physical disability, or other applicable legally protected characteristics.

Great Place to Work® Certified 2026 – JAGGAER

Join a workplace where innovation, collaboration, and people come first.

We are proud to announce that JAGGAER has been certified as a Great Place to Work® for 2026, recognizing our commitment to creating an inclusive, empowering, and high-performing culture.