Cyber Security Analyst

Sonata Software; Hyderabad, Chennai, Bengaluru; Hybrid; INR 600,000 - 900,000; Full time

Job summary

Sonata Software is looking for a security operations professional to monitor and respond to security incidents across on-premises and cloud environments. You will triage investigations using ServiceNow, Defender for Endpoint, and Microsoft Sentinel while collaborating with Azure and Wiz to remediate findings.

Engagement includes privileged access management with Delinea and documenting remediation actions in tickets for proper closure and stakeholder updates.

Qualifications

• Experience in monitoring and managing security incidents using ServiceNow.
• Proficient with Defender for Endpoint and Sentinel for incident investigations.
• Familiar with cloud security monitoring on Azure and Wiz Cloud Security.
• Knowledge of Privileged Access Management (Delinea) is a plus.
• Ability to document remediation actions in incident tickets clearly.

Responsibilities

• Monitor, triage, investigate, and manage security incidents through ServiceNow.
• Analyze malware alerts, suspicious activities, and endpoint detections.
• Conduct threat hunting and security investigations using Defender and Sentinel.
• Review and remediate cloud security findings using Wiz.
• Assist with vulnerability management and risk prioritization.
• Prepare incident summaries, status updates, and stakeholder communications.

Skills

Security incident response

Threat hunting

Education

Microsoft SC-200

Microsoft AZ-500

Tools

ServiceNow

Microsoft Defender for Endpoint

Microsoft Sentinel

Microsoft Azure

Wiz Cloud Security Platform

Delinea

Job description

Key Responsibilities

• Monitor, triage, investigate, and manage security incidents through ServiceNow.
• Perform endpoint security investigations using Microsoft Defender for Endpoint.
• Analyze malware alerts, suspicious activities, and endpoint detections.
• Conduct threat hunting and security investigations using Microsoft Defender and Microsoft Sentinel.
• Review and remediate cloud security findings using Wiz.
• Support Azure security monitoring and investigate cloud-related security incidents.
• Manage privileged access and credential-related activities through Delinea.
• Validate remediation actions and document findings in ServiceNow tickets.
• Escalate critical security incidents to appropriate teams and stakeholders.
• Collaborate with infrastructure, cloud, and application teams to resolve security findings.
• Track security incidents through resolution and ensure proper closure documentation.
• Assist with vulnerability management and risk prioritization.
• Prepare incident summaries, status updates, and stakeholder communications.

Tools & Technologies

• ServiceNow
• Microsoft Defender for Endpoint
• Microsoft Sentinel
• Microsoft Azure
• Wiz Cloud Security Platform
• Delinea (Privileged Access Management)Tools & Technologies (Not mandatory)

Relevant certifications such as

• Microsoft SC-200
• Microsoft AZ-500

Regards