Cyber Security Analyst

Sunrise Biztech Systems; Hyderabad; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Sunrise Biztech Systems in Hyderabad seeks a Cyber security analyst with 5-7 years of security operations experience to lead alert investigations and improve detections for both on‑premises and cloud environments.

You will map alerts to MITRE ATT&CK TTPs, collaborate with global teams, tune rules, and contribute to automation initiatives while supporting 12‑month contract goals.

Qualifications

• 5+ years in security operations in medium/large enterprises.
• Experience in alert triage and detection engineering/content tuning.
• Experience working across global time zones.

Responsibilities

• Lead end to end investigation and triage of alerts with high quality documentation across on-premises and cloud environments.
• Collaborate with cross functional teams and operate as a frontline defender in a 24/7 setting.
• Identify detection gaps and implement improvements through new or updated detection rules.
• Reduce false positives by tuning alerts and deprecating obsolete detections.
• Develop and validate detection logic against MITRE ATT&CK aligned TTPs.
• Contribute to new use case development based on attacker behavior and maintain playbooks and SOPs.
• Identify opportunities and implement automation and AI workflows within Detection.

Skills

SIEM rule-writing

EDR/NDR logs analysis

Cloud logs analysis & IAM anomalies

On-prem & cloud threat defense

MITRE ATT&CK mapping

Scripting: PowerShell/Bash/Python

Tools

PowerShell

Bash

Python

Job description

Title :Cyber security analyst(1771-1)

Experience: 5 - 7 Years

Location: Hyderabad

Contract : 12 months

Key Responsibilities

• Lead end to end investigation and triage of alerts with clear, high quality documentation
  across both on-premises infrastructure and cloud environments ensuring equal depth
  and rigor in each area.
• Collaborate with cross functional teams and operate as a frontline defender in a 247 setting.
• Identify detection gaps and implement improvements through new or updated
  detection rules.
• Reduce false positives by tuning low value alerts and deprecating obsolete detections.
• Develop, review, and validate detection logic against MITRE Telecommunication&CK aligned TTPs.
• Contribute to new use case development based on attacker behavior and maintain
  assisted playbooks and SOPs.
• Identify opportunities and implement automation and AI workflows within Detection

Experience

• 5+ years in security operations in medium/large enterprises.
• Demonstrated experience in both alert triage and detection engineering/content tuning.
• Experience working across global time zones.

Technical Expertise

• Strong SIEM rule-writing skills.
• Hands-on with EDR, NDR, firewall logs.
• Demonstrated expertise in analyzing cloud logs, detecting IAM anomalies, and
  interpreting SaaS security alerts to identify and respond to advanced threats.
• Proven ability to assess and defend against threat vectors targeting both on-premises
  infrastructure and modern cloud workloads, including containerized and serverless
  environments.
• Solid understanding of MITRE Telecommunication&CK; ability to map alerts to TTPs.
• Scripting (PowerShell, Bash, Python) for enrichment/automation.

Soft Skills

• High-quality technical writing and documentation.