Cyber Security Incident Analyst - VOIS

VOIS; Bengaluru; On-site; INR 900,000 - 1,400,000; Full time

Job summary

VOIS Bengaluru is seeking a Cyber Security Incident Analyst to independently own and manage cybersecurity incidents from initial detection through to resolution, monitoring queues including SIEM, SOAR, Incident Portal, DLP and customer incident queues.

You will assess risk, perform detailed technical analyses, make escalation decisions and ensure incidents are managed in line with Vodafone Cyber Security standards, with audit-ready documentation.

Qualifications

• Experience in Cyber Security Operations, SOC, or Incident Response.
• Hands-on investigations in production environments.
• Ability to own incidents end-to-end and document findings clearly.

Responsibilities

• Own cybersecurity incidents end-to-end from detection to resolution.
• Triage, validate and prioritize incidents with minimal supervision.
• Assess risk and impact to systems, data, and customers.
• Correlate alerts, logs and IoCs for deep investigations.
• Coordinate with CSOC, Threat Intelligence, Forensics/CERT, IT and Network teams.
• Maintain audit-ready incident documentation.

Skills

SOC Operations

Incident Response

Threat Hunting

Log Analysis

Tools

SIEM

SOAR

DLP

Incident Portal

Job description

Who We Are

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation.

Who We Are

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation.

As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in‑house and 3rd party capability.

We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal.

#VOIS #BeUnrivalled #CreateTheFuture

About This Role

We are seeking a Cyber Security Incident Analyst to independently own and manage cybersecurity incidents from initial detection through to resolution. You will monitor and manage incidents received through multiple intake queues, including SIEM, SOAR, Incident Portal, DLP and VFCZ VBU customer incident queues.

This role requires autonomy, sound judgement and the ability to progress complex investigations with minimal supervision. You will assess risk and business impact, perform detailed technical analysis, make informed escalation decisions and ensure incidents are managed consistently in line with Vodafone Cyber Security Incident Management standards.

A strong focus on analytical depth, timely risk-based escalation and accurate, audit-ready documentation is essential.

What You’ll Do

• Independently own and manage cybersecurity incidents throughout the end-to-end incident lifecycle.
• Perform advanced incident triage, validation and prioritisation with minimal supervision.
• Assess incident severity, risk and potential impact on customers, services, data and operations.
• Conduct detailed technical investigations by correlating alerts, logs and indicators of compromise (IoCs).
• Identify and appropriately close false positives and low-risk events without unnecessary escalation.
• Progress investigations and determine when escalation or specialist assistance is required.
• Coordinate incident response activities across CSOC, Threat Intelligence, Forensics/CERT, IT and Network teams.
• Maintain accurate, comprehensive and audit-ready documentation throughout each incident.
• Actively manage incidents through to resolution in accordance with applicable SLAs and response standards.
• Provide clear, concise and risk-focused incident updates to incident managers and relevant stakeholders.

Who You Are

• You have proven experience in Cyber Security Operations, a Security Operations Centre (SOC), Incident Response or Cyber Defence.
• You have hands‑on experience leading cybersecurity incident triage and investigations in production environments.
• You can independently take ownership of incidents from initial identification through to resolution.
• You have excellent analytical capabilities and can assess complex alerts, logs and events to determine their actual impact.
• You have a solid understanding of common cyber threats and attack techniques.
• You understand the cybersecurity incident management lifecycle, including escalation and problem handover.
• You have experience coordinating effectively across multiple technical and non‑technical teams during incidents.
• You communicate clearly with stakeholders and maintain accurate, audit-ready documentation.

Not a perfect fit?

Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best.

What's In It For You

• Take end-to-end ownership of cybersecurity incidents and contribute directly to protecting customers, services, data and operations.
• Work collaboratively with specialist teams including CSOC, Threat Intelligence, Forensics/CERT, IT and Network teams.
• Gain exposure to complex cybersecurity incidents across multiple intake channels and production environments.
• Develop experience in risk-based decision‑making, stakeholder communication and incident coordination.

What Skills You Will Learn

• Advanced cybersecurity incident triage, investigation and prioritisation.
• Alert, log and IoC correlation across security environments.
• Risk and business‑impact assessment.
• Incident escalation and cross‑functional response coordination.
• Audit‑ready cybersecurity incident documentation.
• Stakeholder communication during complex and high‑priority incidents.
• End-to-end incident lifecycle and SLA management.

VOIS Equal Opportunity Employer Commitment

Vodafone recognises and celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race, colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio‑economic background.

Join Us

At Vodafone, we’re working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this.

We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together.

With us, you can truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.

Follow us on social media and #StayConnected

LinkedIn: https://www.linkedin.com/company/vois/
Facebook: https://www.facebook.com/voisglobal
Instagram: https://www.instagram.com/voisglobal/