Cyber security Analyst

Stefanini North America and APAC; Maharashtra; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Stefanini North America and APAC seeks a Cybersecurity Analyst in Maharashtra, India, to support IT, OT and Product security. The role focuses on identifying and evaluating cybersecurity risks, incident response, and management across standardized platforms.

You will work with SIEM tools such as CrowdStrike NG-SIEM, and script with PowerShell and Python, assisting vulnerability management and threat hunting. Occasional off-hours support may be required.

Qualifications

• 3–5 years of IT or information security experience.
• Willingness to learn and continually improve skills.
• Logical and critical thinking for troubleshooting.
• Excellent collaboration in cross-functional teams.
• Strong communication and interpersonal skills.
• Basic understanding of IT security, hardware, OS and networks.

Responsibilities

• Support IT, OT and Product security by identifying and evaluating cybersecurity risks and incidents.
• Assist with vulnerability management and data protection tasks.
• Conduct threat hunting using system logs and tools.
• Investigate intrusions and incidents, both successful and unsuccessful.
• Perform initial incident response and manage documentation and playbooks.
• Collaborate with the Security Operations Manager as needed and review security alerts.

Tools

CrowdStrike NG-SIEM

PowerShell

Python

Job description

Job Description

The Cybersecurity Analyst position is a critical member of the global Cybersecurity team, supporting across IT, OT and Product security with identifying and evaluating cybersecurity risks in relation to incident response and management, including incident identification, investigations, and response. Additionally, this role will entail assisting with operational duties such as data protection, vulnerability management, and acquisition integration across standardized platforms.

• Proficiency in using Security Information and Event Management (SIEM) solutions, such as CrowdStrike NG-SIEM.
• Knowledge in different scripting languages, such as PowerShell and Python.
• Assist with vulnerability management program to mitigate identified security vulnerabilities.
• Conduct threat hunting using system logs and tools to detect anomalies and intrusions.
• Recognize and investigate potential intrusion attempts, including successful and unsuccessful incidents.
• Perform initial Incident Response (IR) and Management activities.
• Creation of incident response playbooks (Ransomware, Denial of Server, Phishing).
• Maintain and update IR standard operating procedures and other similar documentation.
• Collaborate with the Security Operations Manager as an incident handler when needed.
• Conduct security reviews and manage security alerts from multiple platforms.

Job Requirements

• 3-5 years of related experience in information technology and/or information security preferred.
• Willingness to learn and continually improve skills to ensure the success of the business and its objectives.
• Logical and critical thinking skills to work through complex troubleshooting issues.
• Excellent collaboration skills with the ability to work effectively in cross-functional teams.
• Excellent communication and interpersonal skills.
• Basic understanding of IT security principles, general hardware, operating systems, and networks.

Preferred Skills

• Knowledge of ethical hacking, networking topologies, incident response processes and threat types.
• Familiarity with cybersecurity frameworks and standards (e.g., ISO 27001, IEC 62443, NIST 800-82, GDPR).
• Relevant industry certifications such as Security+, PenTest+, Certified Ethical Hacker, CISA, CISSP, CRISC.
• Strong relationship management skills, with the ability to resolve conflicts and build internal collaboration.
• Experience integrating companies into standardized platforms.

Competencies

• Clear written/verbal communication for technical and non-technical audiences.
• Continuous improvement mindset.
• High integrity and ability to handle sensitive information appropriately.

Work Environment

• May require participation in occasional off‑hours incident support.
• Some travel may be required to support global teams and key sites.