Cyber Security Analyst

Genpact Ltd.; Bengaluru Urban; On-site; INR 600,000 - 1,200,000; Full time

Job summary

Genpact Ltd. in Bengaluru seeks a Cyber Security Analyst with 2-3 years in security operations and threat monitoring. You will monitor events with Microsoft Sentinel and Defender, investigate incidents, and support email security and IR capabilities.

Responsibilities include log analysis, IOC hunting, and collaboration with IT teams to improve defenses. Expect to work in a 24x7 SOC environment and stay current with security best practices.

Qualifications

• Hands-on experience in security operations and incident response.
• Proficient with Microsoft Sentinel and Defender platforms.
• Knowledge of MITRE ATT&CK framework and phishing defenses.

Responsibilities

• Monitor, analyze, and respond to security events using Microsoft Sentinel and Defender.
• Investigate and triage incidents, determine impact and remediation steps.
• Threat analysis, IOC hunting, and identifying emerging threats.
• Monitor phishing, malware, ransomware, and other cyberattack attempts.
• Manage email security incidents including phishing and spoofing.
• Support containment, eradication, and recovery activities.
• Conduct log analysis and correlate events across security tools.
• Collaborate with IT/security teams to improve security posture.
• Maintain incident reports and runbooks; stay updated on threats.

Skills

Microsoft Defender

Microsoft Sentinel

Threat Monitoring

Incident Response

Log Analysis

PowerShell

KQL

Python

Phishing mitigation

Tools

SIEM

EDR

Email Security Solutions

MITRE ATT&CK

Threat intelligence tooling

Job description

We are seeking a proactive and detail-oriented Cyber Security Analyst with 2-3 years of experience in Security Operations and Threat Monitoring. The ideal candidate should have hands-on experience with Microsoft Sentinel and Microsoft Defender, a strong understanding of cyber threats and attack techniques, and experience in investigating security incidents. The candidate should also possess knowledge of email security, security monitoring, incident response, and modern cybersecurity tools and concepts.

Key Responsibilities

• Monitor, analyze, and respond to security events and alerts using Microsoft Sentinel and Microsoft Defender.
• Investigate and triage security incidents, determine impact, and recommend remediation actions.
• Perform threat analysis and identify indicators of compromise (IOCs), suspicious activities, and emerging threats.
• Monitor and analyze phishing, malware, ransomware, and other cyberattack attempts.
• Manage and investigate email security incidents, including phishing, spoofing, and malicious email campaigns.
• Support incident response activities and assist in containment, eradication, and recovery efforts.
• Conduct log analysis and correlation of events from various security tools and platforms.
• Collaborate with IT and security teams to improve security posture and operational processes.
• Maintain security documentation, incident reports, and operational runbooks.
• Stay updated on the latest cybersecurity threats, vulnerabilities, attack techniques, and industry best practices.
• Participate in 24x7 security operations support through rotational shifts.

Required Skills & Qualifications

Technical Skills

• Hands-on experience with:
• Email Security Solutions
• Good understanding of:
• Cyberattack lifecycle and threat landscape
• Malware, ransomware, phishing, and social engineering attacks
• MITRE ATT&CK Framework
• Security Incident Management and Response
• Log Analysis and Event Correlation
• SIEM and EDR technologies
• Network Security fundamentals
• Identity and Access Management concepts
• Windows Security and Active Directory basics

Security Concepts

• Security monitoring and alert triage
• Threat detection and threat hunting
• Vulnerability management awareness
• IOC and TTP analysis
• Email security best practices
• Security operations center (SOC) processes

Preferred Qualifications

• Certifications such as:
• Microsoft SC-200
• Microsoft SC-900
• CompTIA Security+
• CEH (preferred)
• Any SOC or Incident Response related certification

Soft Skills

• Strong analytical and problem-solving skills.
• Good verbal and written communication skills.
• Ability to work effectively in a fast-paced SOC environment.
• Willingness to work in 24x7 rotational shifts.
• Ability to prioritize and manage multiple security incidents simultaneously.
• Team player with a continuous learning mindset.

Nice to Have

• Experience with threat hunting activities.
• Basic scripting knowledge (PowerShell, KQL, Python, or Bash).
• Exposure to cloud security concepts (Azure/Microsoft 365 Security).
• Understanding of security compliance and governance frameworks.