CyberSecurity Analyst - Senior

T-Systems ICT India Pvt. Ltd.; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

T-Systems ICT India Pvt. Ltd. is seeking a security operations professional to monitor and analyze security events, respond to incidents, and proactively identify risks.

The role emphasizes hands-on experience with SIEM, EDR, CNAPP, and cloud security, along with collaboration across teams to enforce security policies. The ideal candidate will have 3+ years in IT security incident response, strong communication skills, and familiarity with tools like Splunk, Nessus, QRadar, Trellix, and Zscaler.

Qualifications

• Hands-on experience in IT security incident response and management (3+ years).
• Experience in SOC environments is preferred.
• Certifications in security domains are a plus.

Responsibilities

• Monitor and analyze security events from various sources, supporting Splunk optimization.
• Perform vulnerability scanning to identify risks and recommend remediation.
• Respond to security incidents including malware, phishing, and breaches.
• Conduct behavior analysis to identify insider threats.
• Coordinate with cross-functional teams to implement security policies.

Skills

EDR

SOAR

IPS/IDS

SIEM

Vulnerability scanning

CNAPP

Web proxy

Cloud security

OSINT tools

Tools

Splunk

Nessus

IBM QRadar

Trellix endpoint security

FortiAnalyser

Zscaler

Job description

• The candidate will be responsible for ensuring the security of our organization's information assets by monitoring and analyzing security events, responding to security incidents, and proactively identifying and mitigating potential security risks.
• The candidate should have experience with SIEM, Vulnerability scanning & remediation, knowledge of IPS/IDS logs, SOAR, malware and botnet, phishing attacks, Trellix endpoint security, Cloud Security, FortiAnalyzer and Zscaler internet security.
• This role requires a strong technical aptitude and excellent communication skills.

Key Tasks & Responsibilities

• Monitor and analyze security events from various sources, support with Splunk for optimization of security monitoring.
• Perform vulnerability scanning with Nessus and other security assessment tools to identify potential security risks and make recommendations for remediation.
• Respond to security incidents, including malware and botnet detection, phishing attacks, and other security breaches.
• Conduct behavior analysis to identify and mitigate potential insider threats.
• Coordinate with cross-functional teams to develop and implement security policies and procedures.
• Evaluate and recommend security solutions to ensure the confidentiality, integrity, and availability of organization's information assets.
• Fundamental knowledge of Azure, AWS, TCP/IP, IP subnet & secure protocols.
• Stay current with the latest security threats and trends and support within team on emerging risks.

Must Have :

At least 3 years of hands-on experience in IT security incident response and management (preferably in a Security Operations Center (SoC) environment, having the following skills:

• Hands-on experience on EDR, SOAR, IPS, SIEM, & Vulnerability scanning
• Cloud-Native Application Protection Platform (CNAPP)
• Web proxy

Tools:

• Splunk, Nessus, IPS/IDS logs, IBM QRadar, ORCA, Trellix endpoint security, VMRay, FortiAnalyser and Zscaler internet security.
• Aware of OSINT tools for- Behavior analysis, malware and botnet detection, phishing validation.

Good to have :

• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Relevant security certifications such as CompTIA Security+, GIAC Certified Incident Handler (GCIH), or Certified Information Systems Security Professional (CISSP) are preferred.
• Familiarity with security frameworks such as NIST, ISO 27001, and CIS Controls.