Cybersecurity Analyst

Cisive India Pvt. Ltd.; India; Remote; INR 1,200,000 - 2,000,000; Full time

Job summary

The Information Security Analyst position at Cisive India Pvt. Ltd. offers a fully remote role anywhere in India with a Monday–Friday schedule.

The candidate will work on security operations, vulnerability management, and GRC programs to strengthen the organization’s security posture while supporting compliance efforts. You will monitor SIEM alerts, conduct threat hunting, assist with SOC 2 and NIST CSF mappings, and collaborate with IT and business teams to communicate risks and remediation

Qualifications

• 5–8 years of information security experience.
• Hands-on experience with SIEM platforms such as Splunk or Microsoft Sentinel.
• Working knowledge of vulnerability management tools such as Tenable Nessus, Tenable.io, or Qualys.
• Understanding of SOC 2 Trust Services Criteria and the NIST Cybersecurity Framework.
• Familiarity with MITRE ATT&CK is an advantage.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and collaboratively in a cross-functional environment.

Responsibilities

• Monitor, tune, and triage security alerts across SIEM platforms; manage the vulnerability management lifecycle and reporting.
• Support SOC 2 Type II compliance activities, map controls to NIST CSF, and assist with audits and risk documentation.
• Collaborate with IT, engineering, and business stakeholders to integrate security best practices and communicate findings clearly.

Skills

Experience in information security

SIEM tools (Splunk, MS Sentinel)

Vulnerability management

SOC 2 & NIST CSF

MITRE ATT&CK familiarity

Analytical & problem solving

Communication skills

Tools

Splunk

Microsoft Sentinel

Tenable Nessus

Nessus.io

Qualys

Job description

It's fun to work in a company where people truly BELIEVE in what they're doing! We're committed to bringing passion and customer focus to the business.

Cybersecurity Analyst Location: Remote – Anywhere in India Work Schedule: Monday to Friday Work Arrangement: Fully Remote Experience: 5-8 Years

Job Summary

We are seeking an Information Security Analyst with 3–5 years of experience across security operations, vulnerability management, and governance, risk, and compliance (GRC). The ideal candidate will have hands‑on experience with security monitoring tools, incident response, and security frameworks such as SOC 2 Type II and NIST CSF. This is a fully remote opportunity open to candidates based anywhere in India, with a Monday-to-Friday work schedule. The role involves strengthening the organization's security posture, supporting compliance initiatives, identifying and mitigating security risks, and collaborating with cross‑functional teams to implement effective security practices.

Key Responsibilities

1. Security Operations & Tooling Monitor, tune, and triage security alerts across SIEM platforms, escalating confirmed incidents in accordance with established procedures and runbooks. Manage the vulnerability management lifecycle, including scanning, risk‑based prioritization, remediation tracking, and management reporting. Support endpoint security, email security, and network monitoring tools, identifying security gaps and recommending configuration improvements. Conduct periodic threat‑hunting activities and contribute to the development and enhancement of detection rules and incident response playbooks. Participate in incident response activities, including containment, eradication, recovery, and post‑incident reviews.
2. Governance, Risk & Compliance (GRC) Support ongoing SOC 2 Type II compliance activities, including evidence collection, control testing, documentation, and coordination with external auditors. Assist with NIST Cybersecurity Framework (NIST CSF) assessments by mapping existing controls to framework requirements, identifying gaps, and supporting remediation efforts. Maintain and update information security policies, standards, and procedures in collaboration with senior team members. Conduct periodic security risk assessments and document findings in the organization's risk register. Track identified risks, control deficiencies, and remediation actions through to closure.
3. Collaboration & Communication Collaborate with IT, Engineering, and business stakeholders to integrate security best practices into day‑to‑day operations. Support security awareness initiatives and provide guidance to employees on information security policies and practices. Prepare clear and concise reports on security metrics, vulnerability status, risk remediation, and compliance posture for management. Communicate technical findings, security risks, and recommended corrective actions effectively to both technical and non‑technical stakeholders.

Required Qualifications

• 5-8 years of experience in information security, with exposure to both technical security operations and compliance functions.
• Hands‑on experience with SIEM platforms such as Splunk, Microsoft Sentinel, or equivalent solutions.
• Working knowledge of vulnerability management tools such as Tenable Nessus, Tenable.io, or Qualys.
• Understanding of SOC 2 Trust Services Criteria and the NIST Cybersecurity Framework.
• Familiarity with common cyberattack techniques, threat detection methods, and defensive security controls.
• Knowledge of MITRE ATT&CK is an advantage.
• Strong analytical, troubleshooting, and problem‑solving skills.
• Ability to work independently and collaboratively in a cross‑functional environment.
• Excellent written and verbal communication skills, with the ability to explain technical findings to non‑technical audiences.

Preferred Qualifications

• Relevant certifications such as CompTIA Security+, CompTIA CySA+, CEH, CISM, or equivalent.
• Experience supporting SOC 2 audits from preparation and evidence collection through audit completion.
• Scripting or automation experience using Python or PowerShell for security tooling, analysis, and reporting.
• Exposure to cloud security environments, including AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Experience with GRC platforms such as Archer, ServiceNow GRC, Drata, or Vanta.

Cisive is a trusted partner for comprehensive, high‑risk compliance‑driven background screening and workforce monitoring solutions, specializing in highly regulated industries—such as healthcare, financial services, and transportation. We catch what others miss, and we are dedicated to helping our clients effortlessly secure the right talent. As a global leader, Cisive empowers organizations to hire with confidence. Through our PreCheck division, Cisive provides specialized background screening and credentialing solutions tailored for healthcare organizations, ensuring patient and workforce safety. Driver iQ, our transportation‑focused division, delivers FMCSA‑compliant screening and monitoring solutions that help carriers hire and retain the safest drivers on the road. Unlike traditional background screening providers, Cisive takes a technology‑first approach powered by advanced automation, human expertise, and compliance intelligence—all delivered through a scalable platform. Our solutions include continuous workforce monitoring, identity verification, criminal record screening, license monitoring, drug & health screening, and global background checks.