Cyber Security Operations Analyst

Spigot Software; Ahmedabad District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Spigot Software is seeking a Cybersecurity Operations & Risk Analyst to act as the primary internal POC for our external Managed SOC, driving daily operational alignment, tracking SLA performance, and leading internal incident response when threats are escalated.

You will design secure infrastructure, craft security policies, and perform risk assessments for vendors and enterprise systems, while managing IAM lifecycles with MFA enforcement and least-privilege.

Responsibilities

• Serve as the primary internal POC for our external Managed SOC, driving daily operational alignment and tracking SLA performance.
• Lead internal incident response efforts when critical threats are escalated.
• Design and maintain secure infrastructure architectures while drafting, implementing, and enforcing security policies and governance frameworks.
• Conduct rigorous technical security reviews and risk assessments for vendors, software applications, and enterprise solutions.
• Architect, deploy, and govern the IAM lifecycle with MFA enforcement and least-privilege principles.
• Manage the vulnerability and patch remediation lifecycle with continuous scanning and timely patch deployment.
• Oversee SIEM data pipelines and log management to ensure secure aggregation of telemetry to the SOC vendor.
• Monitor Data Loss Prevention (DLP) tools and tune rules to safeguard sensitive data.

Job description

Cybersecurity Operations & Risk Analyst

Serve as the primary internal Point of Contact (POC) for our external Managed SOC, driving daily operational alignment, tracking SLA performance, and leading internal incident response efforts when critical threats are escalated.

Design and maintain secure infrastructure architectures while drafting, implementing, and enforcing comprehensive corporate IT security policies and governance frameworks.

Conduct rigorous technical security reviews and risk assessments for all prospective third-party vendors, software applications, enterprise solutions, and internal operational processes.

Architect, deploy, and govern the Identity and Access Management (IAM) lifecycle, ensuring robust Multi-Factor Authentication (MFA) enforcement and strict adherence to role-based least-privilege principles.

Manage the vulnerability and patch remediation lifecycle: utilize continuous scanning tools to identify exposures across the corporate systems, prioritize risks, and coordinate timely patch deployment.

Oversee our SIEM data pipelines and log management architecture, verifying that telemetry from critical endpoints, networks, and host systems is securely aggregated and streamed to our SOC vendor.

Monitor Data Loss Prevention (DLP) tools and lead data protection operations, routinely reviewing DLP alerts, investigating potential data leaks or policy violations, and tuning prevention rules to safeguard sensitive corporate and customer data.