Cybersecurity Analyst

Luxoft; Hyderabad; In loco; INR 2.500.000 - 3.500.000; Tempo pieno

Descrizione del lavoro

Luxoft in Hyderabad is seeking an experienced Security Operations Analyst to join a 24x7 team delivering leading-edge security. You will triage and investigate alerts, write and tune detection rules, and correlate on-premises and cloud logs to strengthen defenses.

You should have 5+ years in security operations, hands-on with SIEM rule-writing, EDR/NDR and IAM anomaly analysis, and knowledge of MITRE ATT&CK.

Competenze

• Requires 5+ years in security operations at medium/large enterprises.
• Proficient in triage and investigation of security alerts.
• Capable of writing and tuning detection rules in SIEM environments.
• Experience analyzing EDR, NDR, and firewall logs.
• Knowledge of cloud log analysis and IAM anomalies.
• Familiarity with MITRE ATT&CK framework.

Mansioni

• Triage and investigate alerts in a 24x7 security operations setting.
• Write, tune, and retire detection rules across on-prem and cloud logs.
• Collaborate with SOC teammates to enhance detection coverage.

Conoscenze

SIEM rule-writing

Alert triage and investigation

Detection engineering and tuning

EDR, NDR, firewall logs

Cloud log analysis and IAM anomalies

MITRE ATT&CK

5+ years in security ops

Descrizione del lavoro

Project description

This is a great opportunity to work as part of a highly regarded team to deliver leading-edge solutions.

Responsibilities

• Security operations analyst who triages and investigates alerts in a 24x7 setting and also writes, tunes and retires the detection rules, across on-premises and cloud logs.

SKILLS

Must have

• SIEM rule-writing
• Alert triage and investigation
• Detection engineering and tuning
• EDR, NDR, firewall logs
• Cloud log analysis and IAM anomalies
• MITRE ATT&CK
• Experience: 5+ years in security operations at medium/large enterprises, though the client skills block says 4-6 years.

Nice to have

• Scripting - PowerShell, Bash, Python
• Automation and AI workflows in detection pipelines
• Containerized and serverless workloads
• Playbooks and SOPs
• Technical writing