Cybersecurity Analyst / Information Security Analyst

Hiringant; Pune District; Hybrid; INR 400,000 - 3,500,000; Full time

Benefits offered by this job

Health insurance

shift/on-call allowance

certification sponsorship

performance bonus

career progression in security tracks

Job summary

Hiringant is seeking a Cybersecurity Analyst in Pune to safeguard systems, data, and customers in a dynamic threat landscape.

You will monitor, detect, respond, and continuously harden defenses across on-prem and cloud environments, with a focus on AI-driven threat trends and evolving attack techniques. Growth opportunities span SOC roles to senior security architecture tracks.

Qualifications

• 2–6 years of hands-on experience in SOC, IR, or security operations.
• Practical experience with SIEM platforms: Splunk, QRadar, Microsoft Sentinel, or similar.
• Working knowledge of networking, firewalls, and common attack vectors (phishing, malware, ransomware).
• Certifications CEH, CompTIA Security+, CISSP strongly preferred; scripting in Python or Bash is a plus.

Responsibilities

• Monitor networks, endpoints, and cloud environments for intrusion, malware, or policy violations using SIEM tools.
• Triage alerts, distinguish threats from false positives, elevate incidents per protocols.
• Lead or support incident response end-to-end: containment, eradication, recovery, post-incident review.

Skills

SOC experience

Incident response

Threat detection

Cloud security

Education

CEH

CompTIA Security+

CISSP

Tools

Splunk

QRadar

Microsoft Sentinel

Endpoint protection

Job description

We are looking for a Cybersecurity Analyst to help protect our systems, data, and customers from an increasingly sophisticated threat landscape. This role is equal parts vigilance and investigation you'll be the first line of defense watching for suspicious activity, and also the person who digs deep when something goes wrong, figures out what happened, and makes sure it doesn't happen again. As AI-driven threats (deepfake-based social engineering, automated phishing, model exploitation) become more common, this role is evolving fast, and we want someone who's excited to grow with it rather than someone looking for a static checklist job.

You'll work as part of a security team responsible for the confidentiality, integrity, and availability of company systems - monitoring, detecting, responding, and continuously hardening our defenses against both known and emerging attack techniques.

Roles & Responsibilities

Monitoring & Detection

• Continuously monitor networks, endpoints, and cloud environments for signs of intrusion, malware, or policy violations using SIEM tools.
• Triage security alerts, distinguish genuine threats from false positives, and elevate critical incidents per defined protocols.
• Analyze logs, traffic patterns, and system behavior to proactively identify anomalies before they become incidents.
• Maintain and tune detection rules to reduce alert fatigue while keeping true-positive detection rates high.

Incident Response

• Lead or support incident response efforts end-to-end: containment, eradication, recovery, and post-incident review.
• Conduct root-cause analysis on security incidents and produce clear, actionable reports for leadership and technical teams.
• Coordinate with IT, engineering, and legal/compliance teams during active incidents to minimize business impact.
• Maintain and regularly test incident response playbooks and runbooks.

Vulnerability & Risk Management

• Perform regular vulnerability assessments and coordinate remediation with engineering teams.
• Conduct or coordinate penetration testing (internal or via third-party vendors) and track findings to closure.
• Assess third-party vendors and integrations for security risk before onboarding.
• Maintain an up-to-date risk register and contribute to periodic security risk assessments.

Security Engineering & Policy

• Configure and maintain firewalls, endpoint protection, IAM policies, and network segmentation.
• Contribute to and enforce security policies, standards, and employee security-awareness training.
• Support compliance efforts for relevant frameworks (ISO 27001, SOC 2, GDPR, or industry-specific regulations).
• Evaluate and help implement new security tools as the threat landscape evolves - including AI-specific risks like prompt injection or model data leakage where relevant.

Continuous Learning

• Stay current on emerging threats, CVEs, and attacker techniques through threat intelligence feeds and security research.
• Participate in tabletop exercises and red-team/blue-team simulations to sharpen incident-response readiness.

Desired Candidate Profile

• 2-6 years of hands-on experience in a SOC, incident response, or security operations role.
• Practical experience with SIEM platforms (Splunk, QRadar, Microsoft Sentinel, or similar) and endpoint detection tools.
• Working knowledge of networking fundamentals, firewalls, and common attack vectors (phishing, malware, ransomware, lateral movement).
• Relevant certifications (CEH, CompTIA Security+, CISSP, or actively pursuing one) strongly preferred.
• Scripting ability (Python or Bash) for automating detection or response tasks is a plus.
• Cloud security experience (AWS/Azure security services, IAM hardening) is a strong plus given growing cloud footprints.
• Calm, methodical decision-making under pressure - incidents don't wait for convenient hours.

Growth Path:

Security Analyst Senior Security Analyst Security Engineer/Lead Security Architect or CISO track

Perks & Benefits:

• Health insurance
• shift/on-call allowance (where applicable)
• certification sponsorship (CEH, CISSP, OSCP)
• performance bonus
• structured career progression into specialized security tracks.

Salary variants by level:

• Fresher (0-2 yrs): 4,00,000 - 6,50,000
• Senior (7-10 yrs): 20,00,000 - 35,00,000+