Cyber Security Analyst

Dun & Bradstreet; Hyderabad; On-site; INR 3,000,000 - 5,000,000; Full time

Job summary

Dun & Bradstreet seeks an experienced Incident Response Lead to drive high-fidelity investigations, containment, and remediation in complex environments. You will mentor analysts, create robust playbooks, and collaborate with cross-functional teams to enhance detection and response maturity across cloud and on-prem resources.

Strong emphasis on MITRE ATT&CK, threat analysis, and on-call incident handling. Familiarity with SIEM/EDR tools and cloud security is essential.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 8+ years in incident response or security operations.
• At least one SANS/GIAC certification (GCIH/GREM/GCFA preferred).
• Hands-on with SIEMs (Splunk, Sentinel) and EDR tools (CrowdStrike, Carbon Black).
• Experience with cloud environments (Azure, AWS, GCP) and log analysis.
• Proficiency in MITRE ATT&CK framework and threat hunting.

Responsibilities

• Lead high-fidelity alert investigations and rapid threat containment.
• Own complex incident investigations and drive remediation.
• Develop scalable workflows and improve IR processes.
• Create and refine playbooks and response guides.
• Mentor junior analysts and provide on-call support.
• Escalate critical cases with sound technical judgment.
• Collaborate with stakeholders to drive security improvements.
• Enhance detection by improving log ingestion and alert logic.
• Assess AI-related security risks and automate responses.

Skills

Incident response

Threat analysis

Security operations

On-call readiness

Mentorship

Communication

MITRE ATT&CK

Scripting (PowerShell, Python)

Log analysis

Cloud security (Azure/AWS/GCP)

Education

Bachelor's degree in Computer Science or Information Security

Tools

Splunk

Microsoft Sentinel

CrowdStrike

Carbon Black

Job description

Essential Key Responsibilities:

• Lead high-fidelity alert investigations, performing deep technical analysis to rapidly identify, contain, and remediate threats.
• Own complex incident investigations, driving technically precise conclusions and elevating the organization's detection and response maturity.
• Champion process development by identifying gaps, designing scalable workflows, and implementing improvements that strengthen the incident response program.
• Create and refine technical playbooks, documentation, and response guides to ensure clarity, consistency, and operational excellence across the program.
• Provide mentorship, guidance, and coaching to less experienced analysts to support skill development and operational readiness.
• Serve as the escalation point for critical and ambiguous cases, applying advanced threat analysis and sound judgment under pressure.
• Collaborate with cross-functional stakeholders to resolve incidents holistically and drive organization wide security improvements.
• Apply analytical and technical expertise to continuously enhance security operations processes, workflows, and response capabilities.
• Contribute to the evolution of the detection landscape by partnering with technical stakeholders to improve log ingestion, alert logic, and signal quality.
• Assess and mitigate AI-related security risks, including model misuse, prompt injection, data leakage, and emerging automation attack vectors.
• Participate in an on-call rotation, responding to high-severity incidents as a subject matter expert.

Essential Skills and/or Certifications:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of eight years of experience in incident response, security operations, or a related field.
• At least one SANS/GIAC certification, with GCIH, GREM, or GCFA preferred.
• Hands-on experience with SIEM platforms, including Splunk and Microsoft Sentinel.
• Hands-on experience with EDR tools, including CrowdStrike and Carbon Black.
• Experience working in cloud environments, including Azure, AWS, GCP, and Al Cloud.
• Proficiency in network log analysis, including NetFlow and PCAP files.
• Deep working knowledge of the MITRE ATT&CK framework and its application to threat detection and response.
• Strong understanding of malware behaviour, exploitation techniques, and Windows, Linux, and macOS internals.
• Ability to analyse scripts across multiple languages, including JavaScript, VBScript, PowerShell, and Python.
• Experience conducting malicious binary analysis across Windows, macOS, and Linux platforms.
• Strong written and verbal communication skills, with the ability to present technical findings clearly to peers and senior leadership.
• Proficiency in Microsoft Office Suite.
• Show an ownership mindset in everything you do; be a problem solver, be curious and be inspired to take action, be proactive, seek ways to collaborate and connect with people and teams in support of driving success.
• Continuous growth mindset, keep learning through social experiences and relationships with stakeholders, experts, colleagues and mentors as well as widen and broaden your competencies through structural courses and programs.
• Where applicable, fluency in English and languages relevant to the working market.