Cyber Security Analyst - Contract - GO/JC/4876/2026

Golden Opportunities; Chennai; Remote; INR 1,100,000 - 1,400,000; Full time

Job summary

Golden Opportunities in India invites a Cyber Security Analyst for a remote contract role within a JSOC context. You will monitor security alerts, investigate incidents, perform root-cause analysis and contribute to threat detection and response across SOC tools.

The role covers playbook development, threat hunting, and reporting, with responsibilities spanning SIEM/EDR management, incident containment and post-incident reviews. 5–8 years of relevant experience demanded.

Qualifications

• Experience monitoring security alerts and triaging events in a JSOC/SOC environment.
• Ability to perform root cause analysis and document remediation steps.
• Familiarity with MITRE ATT&CK for mapping detections and tactics.

Responsibilities

• Monitor security alerts and events from JSOC tools, triage within SLAs.
• Investigate, contain and resolve cybersecurity incidents across IR lifecycle.
• Perform root cause analysis and document findings.
• Assign incident severity and escalate high-severity events.
• Participate in after-hours incident response as required.
• Analyse alert trends to reduce false positives and improve detections.
• Develop and tune detection rules and use cases across platforms.
• Maintain JSOC playbooks, runbooks and SOPs.
• Own security tools configuration and optimization (SIEM, EDR/XDR).
• Conduct threat hunting and operationalize threat intelligence.
• Maintain incident records, dashboards and audits.

Skills

Security monitoring

Alert triage

Incident response

Root cause analysis

SIEM

EDR/XDR

Threat detection

Threat hunting

Phishing

Malware investigation

Security playbooks

Incident reporting

Education

Any qualification

Tools

SIEM

EDR/XDR

Email security tools

Job description

Job Details

• Job Title: Cyber Security Analyst - Contract Role
• Job Location: Anywhere from India
• Work Model: Remote
• Total Experience and Relevant Experience: 5 to 8 years
• Candidate Location: Anywhere from India
• Skills – Mandatory Security monitoring, alert triage, incident response ,root cause analysis; SIEM, EDR/XDR, threat detection ,threat hunting, phishing ,malware investigation, security playbooks/runbooks, incident reporting
• Candidate Industry: Cybersecurity / Security Operations Centre (SOC/JSOC) or related environments
• Diversity: Not specified
• Specific Remarks: No Distance Education
• Certification – Nil

Education and Certification

• Qualification: Any qualification.

Detailed Job Description

Position Overview

The Cyber Security Analyst, JSOC is responsible for monitoring, analysing and independently responding to security alerts and incidents across the organization. As a core member of the Joint Security Operations Centre (JSOC), the role protects organizational systems and data through threat detection, incident response, detection engineering, security monitoring, security tool administration and continuous improvement of security operations.

Key Responsibilities

Security Monitoring, Alert Triage & Incident Response (50%)

• Monitor security alerts and events from JSOC tools and platforms, ensuring the security queue is triaged within established SLAs.
• Independently investigate, triage, contain and resolve cybersecurity incidents across the full incident response lifecycle.
• Perform root cause analysis and document findings and remediation actions.
• Assign incident severity based on established criteria and elevate high-severity incidents according to procedures.
• Participate in after-hours and on-call incident response as required.

Threat Detection & Alert Tuning (10%)

• Analyse alert trends to reduce false positives and improve signal quality.
• Develop, tune and maintain detection rules, correlation logic and use cases across security platforms.
• Improve monitoring coverage and detection effectiveness; validate and test new alerting capabilities.
• Map detections to MITRE ATT&CK techniques to identify and close coverage gaps.

JSOC Playbooks & Process Improvement (15%)

• Develop, maintain and update JSOC playbooks, runbooks and standard operating procedures.
• Identify opportunities to improve incident response processes and operational efficiency.
• Document lessons learned and incorporate improvements into JSOC procedures.

Security Tool Administration & Optimization (5%)

• Act as technical owner for assigned security platforms, such as SIEM, EDR/XDR and email security tools.
• Manage day-to-day configuration, monitoring and optimization of assigned tools.
• Work with vendors and internal teams to troubleshoot issues and implement enhancements.
• Ensure tools operate effectively and generate actionable alerts.

Threat Hunting & Threat Intelligence (10%)

• Conduct proactive, hypothesis-driven threat hunting activities.
• Investigate suspicious activity, compromised accounts, malware infections and phishing incidents.
• Operationalize threat intelligence to improve detection and response, and track relevant threat actors and TTPs.

Reporting & Documentation (10%)

• Maintain detailed incident records and investigation notes, ensuring tickets are complete and accurate.
• Contribute to operational metrics, dashboards and management reporting, including MTTD and MTTR.
• Support security audits, compliance activities and evidence collection as required.

Key Skills

Mandatory Key Skills

• Security monitoring, alert triage, incident response ,root cause analysis; SIEM, EDR/XDR, threat detection ,threat hunting, phishing ,malware investigation; security playbooks/runbooks, incident reporting.

Good to Have Skills

• CISSP, GCIA, GCIH, GSEC, SC-200 or equivalent certifications; experience with threat intelligence operationalization and security tool optimization.

Additional Requirements

• Nil