Information Security Analyst II

Rocket India; Bengaluru; On-site; INR 800,000 - 1,800,000; Full time

Benefits offered by this job

Health and wellness benefits

Continuous learning opportunities

Flexible work arrangements

Collaborative culture

Job summary

Rocket India is seeking an Information Security Analyst (SOC) to be the first line of defense for protecting customers and assets. You will monitor alerts from SIEM, EDR, email security, and cloud platforms, investigate anomalies, and document findings in case records.

The role emphasizes MITRE ATT&CK mapping, incident response lifecycle, and coordination with ThreatOps and IT teams. You’ll need a strong analytical mindset, a background in information security, and the ability to work outside

Qualifications

• Bachelor’s degree in information assurance, computer science, or related field.
• Hands-on experience with a SIEM and log search across large data sets.
• Experience with endpoint detection and response tooling.
• Familiarity with MITRE ATT&CK and incident response lifecycle.
• Clear written communication and the ability to work outside standard hours.

Responsibilities

• Monitor and triage alerts across SIEM, EDR, email security, identity, and cloud platforms.
• Investigate suspicious activity and confirm malicious behavior via multiple telemetry sources.
• Classify activity using MITRE ATT&CK framework for trend analysis.
• Record findings and reasoning in case records.
• Escalate incidents with clear summaries and next steps.
• Support containment, eradication, and recovery activities during incidents.
• Collaborate with ThreatOps, IT, engineering to validate findings.

Skills

SIEM

Threat detection

Incident response

Phishing analysis

MITRE ATT&CK

Endpoint security

Log analysis

Documentation

Communication

Education

Bachelor’s degree in information assurance

Tools

EDR tooling

Job description

At Rocket India, we believe that protecting our people, our data, and our clients isn’t just a job - it’s a mission. Our Security Operations Center is the nerve center of that mission, where sharp minds meet cutting-edge technology to keep threats at bay and innovation moving forward. If you thrive in fast-paced environments, love solving puzzles under pressure, and want your work to directly safeguard the dreams of millions of homeowners, this is where you belong.

About the Role

As our Information Security Analyst (SOC), you’ll be the first line of defense - the one who spots the signal in the noise and drives every case to a clear, documented resolution. Here’s what your day-to-day looks like:

• Monitor and triage alerts across SIEM, endpoint detection and response, email security, identity, and cloud security platforms, prioritizing by risk and potential business impact

• Investigate suspicious activity to a conclusion, pivoting across multiple telemetry sources to confirm or rule out malicious behavior

• Classify observed activity against frameworks such as MITRE ATT&CK to support consistent categorization and trend analysis

• Analyze reported phishing, endpoint detections, identity anomalies, and cloud misconfiguration alerts, recording findings and reasoning in the case record

• Review indicators using threat intelligence and malware analysis tooling to establish reputation and observed behavior

• Escalate confirmed or suspected incidents promptly, with a clear summary of what is known, what remains unverified, and recommended next steps

• Apply the incident response lifecycle - detection and analysis, containment, eradication, recovery, and post-incident review - to owned incidents

• Determine blast radius and reconstruct attack timelines by correlating endpoint, identity, network, and log telemetry

• Execute containment actions such as host isolation, account disablement, and indicator blocking

• Collect and preserve evidence while maintaining sound chain of custody

• Support the incident response lead on P1 incidents by providing scoping, evidence, and timeline reconstruction

• Partner with ThreatOps, SecOps Engineering, IT, and application teams to validate findings and coordinate remediation

• Tune detection logic to reduce false positives, documenting rationale and risk accepted for every suppression or threshold change

• Track recurring alert patterns and identify candidates for automation

• Maintain and improve triage runbooks so investigative steps are repeatable across the team

• Participate in tabletop exercises and response drills to build and maintain readiness

About You

Minimum Qualifications

• 1+ year in an information security analyst or SOC analyst role

• 3+ years of experience in a technology role

• Bachelor’s degree in information assurance, computer science, or a related field, or equivalent experience

• Hands-on experience with a SIEM, including log search, correlation, and alert triage across large structured and unstructured data sets

• Working knowledge of endpoint detection and response tooling and the investigative workflow it supports

• Proficiency in operating systems (Windows, macOS, Linux/Unix, mobile) and core network theory, including common protocols and basic traffic analysis

• Ability to read and interpret scripts, and to write basic scripts or queries in support of an investigation

• Familiarity with common attacker techniques and a recognized classification framework such as MITRE ATT&CK

• Working understanding of the incident response lifecycle and the ability to apply it to live incidents

• Clear written communication - able to document an investigation so a colleague can pick it up without a verbal handoff

• Schedule flexibility - available to work outside standard business hours, including evenings, weekends, and holidays, as incident severity and volume demand

What You Will Get

At Rocket India, you’re not just filling a seat - you’re joining a team that invests in your growth, well-being, and future. You’ll have access to comprehensive health and wellness benefits, continuous learning opportunities, industry-leading tools and technologies, and a collaborative culture that celebrates wins big and small. We offer competitive compensation, flexible work arrangements, and the chance to work on problems that genuinely matter - protecting the financial futures of millions while building your own career in one of the most dynamic areas of cybersecurity.

About Us

Rocket India, registered as NSM Services Private Limited and formerly Mr. Cooper, is a wholly owned subsidiary of Rocket Mortgage, LLC, headquartered in Detroit, Michigan. As a core part of Rocket’s global ecosystem, Rocket India helps shape the future of home financing through technology, innovation, operations, product, and customer-focused solutions. Our teams build scalable platforms and digital experiences that simplify mortgage origination and servicing while supporting Rocket’s mission to "Help Everyone Home".

We are committed to providing a fair and inclusive workplace for all team members and applicants. All qualified applicants will receive consideration for employment without regard to sex, religion, caste, disability, or gender identity, consistent with applicable Indian law, including the Constitution of India, the Code on Wages, 2019, the Rights of Persons with Disabilities Act, 2016, and the Transgender Persons (Protection of Rights) Act, 2019. We welcome applications from persons with disabilities and from all sections of society.