Information Security Analyst

Fastenal; Bengaluru; Hybrid; INR 900,000 - 1,300,000; Full time

Job summary

Fastenal is seeking an Information Security Analyst in Bengaluru, India, to strengthen our security posture across people, processes, and technology. The role focuses on security operations, incident response, threat hunting, and governance support within a dynamic enterprise environment.

You will work with Defender XDR and Sentinel, map detections to MITRE ATT&CK, and collaborate with IT and business teams to implement protective controls and response playbooks.

Qualifications

• Bachelor's degree in IT or CS with 4+ years in information security/SOC/IR.
• Proficiency in writing and tuning KQL queries; familiarity with MITRE ATT&CK.
• At least 2 years with Microsoft Defender XDR (Endpoint, Identity, O365 & Cloud).
• Experience implementing security standards and procedures.
• Knowledge of security technologies: firewalls, EDR, DLP, IDS/IPS, SIEM, vulnerability management.
• Excellent written and oral communication; self-motivated and customer-focused.

Responsibilities

• Perform Security Operations and Incident Response monitoring, triaging, investigating, and responding to alerts and incidents through full lifecycle.
• Work across Microsoft Sentinel/Defender XDR to optimize analytics rules and detections.
• Conduct proactive threat hunting across endpoints, identities, email and cloud telemetry per MITRE ATT&CK.
• Enrich investigations with malware/phishing triage and threat-intelligence correlation.
• Document investigations and maintain runbooks; support SOAR to improve MTTD/MTTR.
• Assist GRC in governance, risk compliance and audits (PCI-DSS, ISO 27000).
• Collaborate with business units to analyze security requirements and communicate threats to stakeholders.

Skills

KQL proficiency

MITRE ATT&CK

SOC/IR experience

Communication skills

Education

Bachelors in IT/CS

Tools

Microsoft Defender

Microsoft Sentinel

SIEM tooling

Scripting (PowerShell/Python)

Job description

Business Unit Overview:

Working as Full-Time Information Security Analyst you will provide analysis for the purpose of supporting and enhancing the information security posture related to Fastenal's people, processes and technology.

Responsibilities:

The duties and responsibilities of this position include, but are not limited to:

• Performing Security Operations and Incident Response monitoring, triaging, investigating, and responding to security alerts and incidents through the full lifecycle (detection, containment, eradication, recovery, and post-incident review)
• Performing Security Operations and Incident Response across the Microsoft Sentinel and Defender XDR (Defender for Endpoint, Identity, Office 365, Cloud Apps) ecosystem including writing and optimizing KQL analytics rules
• Conducting proactive threat hunting across endpoint, identity, email, and cloud telemetry, and mapping activity according to the MITRE ATT&CK framework
• Performing enrichment, malware/phishing triage, and threat-intelligence correlation to determine scope, impact, and appropriate response actions
• Documenting investigations and maintaining runbooks/playbooks; supporting automation (SOAR) to improve MTTD and MTTR
• Assisting the IT Governance, Risk, and Compliance (GRC) team to promote and ensure appropriate compliance with the agreed governance/risk framework
• Assisting in performing control framework assessments (PCI-DSS and ISO 27000) and internal/external audit engagements
• Assisting in risk and compliance evaluations of systems and business processes
• Collaborating with business units to provide analysis of security requirements
• Communicating with users and management on potential threats to the information security environment
• Maintaining a comprehensive understanding of PCI Data Security Standard (PCI-DSS)
• Recommending preventative, mitigating, and compensating controls to ensure appropriate level of protection and adherence to the goals of the information security strategy

RequiredPosition Qualifications:

The following skills and qualifications are required for this position:

• Possess a degree in Information Technology, Computer Science and have at least 4 years of relevant experience in the areas of information security and Security Operations Center & Incident Response (SOC/IR)
• Proficiency writing and tuning detection/hunting queries (KQL) and familiarity with the MITRE ATT&CK framework
• Having at least 2 years working experience with Microsoft Defender Extended Detection and Response (Endpoint, Identity, O365 & Cloud)
• Prior work experience implementing security standards and procedures
• Working knowledge of a broad range of security technologies, including NextGen Firewalls, Endpoint Protection/EDR, DLP, IDS/IPS, SIEM, Endpoint Protection/EDR, Anti-malware, and Vulnerability management
• Excellent written and oral communication skills
• Highly motivated, self-directed and customer service oriented
• Demonstrate strong organization, planning and prioritizing abilities
• Exhibit strong problem solving, deductive reasoning and decision-making skills
• Demonstrate strong math aptitude, attention to detail and sense of urgency
• Work independently as well as in a team environment
• Demonstrate our core values of ambition, innovation, integrity and teamwork

Preferred Position Qualifications:

• Possess professional IT Security Certification (Microsoft Security Operations Analyst (SC-200), CompTIA CySA+, GCIH, CEH, CCNA Security)
• Hands-on experience with Microsoft Sentinel, Proof Point, Cisco Umbrella, Cisco DUO, Microsoft Azure Cloud Security, Microsoft Purview
• Prior experience implementing security standards and procedures
• Demonstrate knowledge of computer operating systems (RedHat Linux, Microsoft Windows) and, virtualization technologies (VMware, Hyper-V)
• Demonstrate knowledge of networking topology concepts
• Previous scripting experience (Bash, PowerShell, Python, or others)