Cyber Security Analyst

Phox Health, Inc.; Bengaluru; Vor Ort; INR 1.500.000 - 2.300.000; Vollzeit

Zusammenfassung

Phox Health, Inc. seeks a seasoned Cybersecurity Analyst in Bengaluru to defend cloud and corporate networks. You will strengthen AWS security, perform vulnerability testing, and help embed security into the software lifecycle.

You’ll monitor SIEM/EDR, drive incident response, and support risk assessments and audits, ensuring ongoing compliance and resilience across all environments.

Qualifikationen

• Bachelor's degree in CS/Info Security or related field.
• 5–8 years of hands-on Cybersecurity, SecOps or Cloud Security experience.
• Proven AWS security experience and secure cloud architecture.

Aufgaben

• Protect cloud and corporate networks; implement security controls in AWS.
• Perform vulnerability assessments and penetration testing on apps/APIs.
• Integrate security into CI/CD (DevSecOps) with SAST/DAST tools.
• Monitor CSPM, IAM, WAF, GuardDuty, CloudTrail for misconfigurations.
• Operate EDR/NGAV, investigate alerts, containment and remediation.
• Lead incident response playbooks for cloud, web, and endpoint threats.
• Conduct IT risk assessments and support audits (SOC 2, ISO 27001).

Kenntnisse

AWS Cloud Security

Web App Security

SecOps

Endpoint Security

Risk Management

SIEM

EDR

CSPM

DevSecOps

Ausbildung

Bachelor's degree in CS/Info Security

Tools

Microsoft Defender

SIEM platforms

SOAR platforms

Jobbeschreibung

We are seeking a highly skilled and hands-on Cybersecurity Analyst to join our team in Bangalore. In this role, you will be on the front lines of our defense, ensuring the security, integrity, and resilience of our cloud infrastructure and corporate network. The ideal candidate will have 5 to 8 years of practical experience with a strong focus on Cloud Security (AWS), Web Application Security, Endpoint Protection, Security Operations (SecOps), and IT Risk Management.

Key Responsibilities

Cloud Security & Web Applications (AWS Focus)

• Implement, manage, and continuously improve security controls across our AWS cloud infrastructure (e.g., IAM, Security Groups, GuardDuty, AWS WAF, CloudTrail).
• Perform regular vulnerability assessments and penetration testing on web applications and APIs.
• Integrate security into the CI/CD pipeline (DevSecOps) and utilize SAST/DAST tools to identify application vulnerabilities early in the software development lifecycle.
• Monitor cloud environments for misconfigurations and enforce Cloud Security Posture Management (CSPM).
• Deploy, administer, and monitor Endpoint Detection and Response (EDR) and Next-Generation Antivirus (NGAV) solutions.
• Investigate endpoint alerts, analyze malicious activity, and implement containment and remediation strategies.
• Ensure all corporate devices meet baseline security compliance and oversee patch management processes.

Security Operations (SecOps) & Incident Response

• Act as a primary responder for security incidents, executing incident response playbooks for cloud, web, and endpoint threats.
• Monitor SIEM dashboards, analyze logs from various sources (firewalls, AWS, endpoints), and perform active threat hunting to detect advanced persistent threats (APTs).
• Automate routine security tasks and responses using scripting (Python, Bash) or SOAR platforms.
• Conduct comprehensive IT risk assessments, threat modeling, and vendor security risk evaluations.
• Help maintain and enforce enterprise security policies, standards, and procedures.
• Assist in continuous compliance monitoring for industry standards (such as SOC 2, ISO 27001, HIPAA, HITRUST among others) and support internal/external security audits.

Required Qualifications & Experience

• Experience: 5 to 8 years of hands-on experience in a Cybersecurity, SecOps, or Cloud Security engineering role.
• Education: Bachelor's degree in computer science, Information Security, or a related technical field.
• Cloud Expertise: Proven, hands-on experience securing AWS hosting environments and managing AWS native security services.
• Technical Skills:
• Deep understanding of web application vulnerabilities (OWASP Top 10) and mitigation techniques.
• Hands-on experience with SIEM platforms and EDR tools (Microsoft Defender).
• Familiarity with network security architecture, TCP/IP, and routing protocols.
• Risk Frameworks: Practical knowledge of risk management frameworks (NIST, CIS Controls) and compliance mandates.

Desirable Certifications

(Holding one or more of the following is highly preferred)

• AWS Certified Security Specialty
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• CompTIA Cybersecurity Analyst (CySA+) or Certified Ethical Hacker (CEH)

What We Look For

• Problem Solver: You have an analytical mindset and love digging into logs to uncover the root cause of an issue.
• Self-Starter: You are proactive about identifying security gaps and don't wait to be told what to secure.
• Communicator: You can explain complex security risks to developers, IT engineers, and non-technical stakeholders alike