Cyber Security Analyst

Ace Recruitment Placement Consultants; Pune District; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Ace Recruitment Placement Consultants in Pune seeks an experienced Security Analyst to handle incident response, threat hunting and cyber defence operations. You will triage alerts, investigate security incidents across Windows/Linux environments, and drive containment and remediation with SIEM and EDR/XDR tools.

The role requires 5+ years in incident response or SOC, strong scripting with PowerShell or Python, and hands-on experience with platforms like Microsoft Defender/Sentinel, CrowdStrike,

Qualifications

• 5+ years of hands-on experience in Incident Response, Cyber Defence, SOC/Blue Team or Cybersecurity Operations.
• Previous experience as a SOC Analyst/L2-L3 Analyst, Incident Responder, Cyber Defence Analyst, Threat Hunter or similar role.
• Strong experience with Incident Response, Threat Hunting and security incident investigation.
• Hands-on experience with SIEM and EDR/XDR platforms such as Microsoft Sentinel/Defender, CrowdStrike, SentinelOne, Splunk, QRadar, Elastic or similar.
• Good understanding of network services and protocols, Windows/Linux environments and security logs.
• Experience with PowerShell and/or Python and query languages such as KQL, SPL or SQL.
• Exposure to malware/phishing investigation, digital forensics, detection engineering and security automation will be an advantage.

Responsibilities

• Investigate and respond to security alerts and cyber incidents from triage through containment, eradication, remediation and closure.
• Conduct threat hunting, IOC/TTP analysis and malicious behaviour investigation.
• Perform host and network triage, including investigation of Windows/Linux systems, network activity and security logs.
• Investigate malware, phishing, ransomware and account compromise incidents.
• Work with SIEM, EDR/XDR and other security technologies to detect, investigate and respond to threats.
• Develop and enhance detection rules, response mechanisms, scripts and automation to improve security operations.
• Analyse security data and contribute to incident RCA, post-incident reviews and continuous improvement.
• Support Cyber Defence projects and improvements across global/regional environments.
• Collaborate with IT/OT, Cybersecurity and other technology teams for incident containment and remediation.
• Contribute to incident response procedures, playbooks and operational handovers across global teams.

Skills

Incident Response

Threat Hunting

SOC Analyst

Cyber Defence Operations

PowerShell

Python

KQL

SQL

Malware Investigation

Tools

Microsoft Defender/Sentinel

CrowdStrike

SentinelOne

Splunk

QRadar

Elastic

Job description

Role & responsibilities

• Investigate and respond to security alerts and cyber incidents from triage through containment, eradication, remediation and closure.
• Conduct threat hunting, IOC/TTP analysis and malicious behaviour investigation.
• Perform host and network triage, including investigation of Windows/Linux systems, network activity and security logs.
• Investigate malware, phishing, ransomware and account compromise incidents.
• Work with SIEM, EDR/XDR and other security technologies to detect, investigate and respond to threats.
• Develop and enhance detection rules, response mechanisms, scripts and automation to improve security operations.
• Analyse security data and contribute to incident RCA, post-incident reviews and continuous improvement.
• Support Cyber Defence projects and improvements across global/regional environments.
• Collaborate with IT/OT, Cybersecurity and other technology teams for incident containment and remediation.
• Contribute to incident response procedures, playbooks and operational handovers across global teams.

Preferred candidate profile

• 5+ years of hands-on experience in Incident Response, Cyber Defence, SOC/Blue Team or Cybersecurity Operations.
• Previous experience as a SOC Analyst/L2-L3 Analyst, Incident Responder, Cyber Defence Analyst, Threat Hunter or similar role.
• Strong experience with Incident Response, Threat Hunting and security incident investigation.
• Hands-on experience with SIEM and EDR/XDR platforms such as Microsoft Sentinel/Defender, CrowdStrike, SentinelOne, Splunk, QRadar, Elastic or similar.
• Good understanding of network services and protocols, Windows/Linux environments and security logs.
• Experience with PowerShell and/or Python and query languages such as KQL, SPL or SQL.
• Exposure to malware/phishing investigation, digital forensics, detection engineering and security automation will be an advantage.