CYBER security Analyst

Cortex Consultants LLC; Chennai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Cortex Consultants LLC is looking for a SME CyberSec Analyst specializing in Vulnerability Management and Incident Response in Chennai, Tamil Nadu. Candidates should have over 7 years of experience, strong technical skills in security operations, and familiarity with tools like Splunk and Qualys. The role involves monitoring security alerts, leading vulnerability programs, and collaborating with teams for remediation. Join a fast-growing cybersecurity team to work on advanced security tooling.

Qualifications

• 7+ years of experience in Cyber Security, particularly in SOC and Vulnerability Management.
• Experience with security monitoring tools and frameworks like MITRE ATT&CK.
• Strong analytical and problem-solving skills.

Responsibilities

• Monitor, investigate, and respond to security alerts.
• Lead the Vulnerability Management program.
• Collaborate with IT teams for timely vulnerability remediation.
• Develop and tune SIEM use cases and dashboards.

Skills

Vulnerability Management

Incident Response

Threat Hunting

SIEM

Scripting/Automation

Education

Relevant certifications (CISSP, CEH)

Tools

Splunk

Qualys

CrowdStrike

Python

Job description

Overview

vulnerability testing; security operations mandatory. SME CyberSec Analyst (SOC / Vulnerability Management) — Experience: 7+ Years. Location: Chennai. Notice period: immediate. Fulltime only.

What You’ll Do

• Monitor, investigate, and respond to security alerts and incidents (L2/L3).
• Lead and manage the Vulnerability Management program including asset discovery, scanning, risk-based prioritization, remediation tracking, and reporting.
• Collaborate with IT and application teams to drive timely vulnerability remediation and SLA adherence.
• Develop and tune SIEM use cases, correlation rules, and dashboards.
• Lead incident response: triage, containment, eradication, and recovery.
• Perform proactive threat hunting using MITRE ATT&CK and threat intelligence.
• Integrate and analyze logs from EDR, firewalls, email, VPN, SASE, and cloud.
• Identify control gaps and recommend security improvements.
• Build/maintain playbooks, SOPs, and automate workflows (SOAR/scripts).
• Participate in on-call rotation for critical incidents.

Core & Must-Have Skills

• SIEM: Splunk / Microsoft Sentinel / QRadar / ELK (use case development & tuning).
• Incident Response & Threat Hunting: Hands-on experience in detection and investigation.
• Vulnerability Management (Core): End-to-end lifecycle including asset discovery, scanning (Qualys / Rapid7 / Nessus), risk-based prioritization, remediation tracking, and reporting.
• Network Security: TCP/IP, DNS, HTTP; tools like Wireshark, Zeek, Nmap.
• EDR & Email Security: CrowdStrike / Defender / SentinelOne; Proofpoint / Abnormal.
• Cloud Security: AWS / Azure / GCP security monitoring & controls.
• Scripting/Automation: Python / PowerShell / Bash.
• OS Security: Strong in Windows & Linux.
• Frameworks: MITRE ATT&CK, common attack vectors & TTPs.

Good to Have

• Malware analysis (static/dynamic).
• SOAR platforms and automation pipelines.
• Experience with SASE, DLP, IDS/IPS.
• Exposure to forensics and APT investigations.

Soft Skills

• Strong analytical and problem-solving ability.
• Clear communication with technical & business stakeholders.
• Ability to prioritize and work in high-pressure environments.
• Experience working with global/onshore-offshore teams.

Compliance & Certifications

• Familiarity with ISO 27001, GDPR, HIPAA.
• Certifications preferred: CISSP, CEH, GCIA, CCSE (ITIL is a plus).

Why Join Us?

Work on advanced security tooling and large-scale environments. Be part of a global SOC with high visibility and impact. Opportunity to drive automation and modern detection engineering. Apply now to be part of a fast-growing cybersecurity team.