Information Security Analyst II

Rocket Homes Real Estate LLC; Chennai District; Sur place; INR 1 200 000 - 2 000 000; Plein temps

Avantages offerts par ce poste

Health and wellness benefits

Learning opportunities

Cutting-edge tools

Collaborative culture

Competitive compensation

Flexible work arrangements

Impactful work

Résumé du poste

Rocket India is seeking an Information Security Analyst (SOC) to be the first line of defense, triaging alerts across SIEM, EDR, email security, and cloud platforms. You will investigate incidents, classify activity using MITRE ATT&CK, and document findings with a clear timeline and recommended actions.

Ideal candidates have 1+ year in SOC, strong scripting basics, and readiness to work outside standard hours.

Qualifications

• 1+ year in an information security analyst or SOC analyst role.
• 3+ years of experience in a technology role.
• Bachelor's degree in information assurance, computer science, or a related field, or equivalent experience.
• Hands-on experience with a SIEM, including log search, correlation, and alert triage across large structured and unstructured data sets.
• Working knowledge of endpoint detection and response tooling and the investigative workflow it supports.
• Proficiency in operating systems (Windows, macOS, Linux/Unix, mobile) and core network theory, including common protocols and basic traffic analysis.
• Ability to read and interpret scripts, and to write basic scripts or queries in support of an investigation.
• Familiarity with common attacker techniques and a recognized classification framework such as MITRE ATT&CK.
• Working understanding of the incident response lifecycle and the ability to apply it to live incidents.
• Clear written communication — able to document an investigation so a colleague can pick it up without a verbal handoff.
• Schedule flexibility — available to work outside standard business hours, including evenings, weekends, and holidays, as incident severity and volume demand.

Responsabilités

• Monitor and triage alerts across SIEM, endpoint detection and response, email security, identity, and cloud security platforms.
• Investigate suspicious activity to a conclusion, pivoting across multiple telemetry sources to confirm or rule out malicious behavior.
• Classify observed activity against MITRE ATT&CK to support consistent categorization and trend analysis.
• Analyze phishing, endpoint detections, identity anomalies, and cloud misconfiguration alerts, recording findings in the case record.
• Escalate confirmed or suspected incidents promptly with a clear summary and next steps.
• Apply the incident response lifecycle to owned incidents.
• Determine blast radius and reconstruct attack timelines by correlating telemetry.
• Execute containment actions such as host isolation and indicator blocking.
• Collect and preserve evidence with sound chain of custody.
• Support the incident response lead on P1 incidents with scoping and timelines.
• Coordinate with ThreatOps, SecOps Eng, IT and applications teams for remediation.
• Tune detection logic to reduce false positives and document rationale for suppressions.
• Track recurring alert patterns and identify candidates for automation.
• Maintain triage runbooks for repeatable investigations.
• Participate in tabletop exercises and drills to maintain readiness.

Connaissances

SIEM

Endpoint detection & response

Email security

Identity management

Cloud security

Formation

Bachelor's degree in Information Assurance / CS

Outils

EDR tooling

Threat intelligence tooling

Malware analysis tooling

Description du poste

At Rocket India, we believe that protecting our people, our data, and our clients isn't just a job — it's a mission. Our Security Operations Center is the nerve center of that mission, where sharp minds meet cutting-edge technology to keep threats at bay and innovation moving forward. If you thrive in fast-paced environments, love solving puzzles under pressure, and want your work to directly safeguard the dreams of millions of homeowners, this is where you belong.

About the Role

As our Information Security Analyst (SOC), you'll be the first line of defense — the one who spots the signal in the noise and drives every case to a clear, documented resolution.

• Monitor and triage alerts across SIEM, endpoint detection and response, email security, identity, and cloud security platforms, prioritizing by risk and potential business impact.
• Investigate suspicious activity to a conclusion, pivoting across multiple telemetry sources to confirm or rule out malicious behavior.
• Classify observed activity against frameworks such as MITRE ATT&CK to support consistent categorization and trend analysis.
• Analyze reported phishing, endpoint detections, identity anomalies, and cloud misconfiguration alerts, recording findings and reasoning in the case record.
• Review indicators using threat intelligence and malware analysis tooling to establish reputation and observed behavior.
• Escalate confirmed or suspected incidents promptly, with a clear summary of what is known, what remains unverified, and recommended next steps.
• Apply the incident response lifecycle — detection and analysis, containment, eradication, recovery, and post-incident review — to owned incidents.
• Determine blast radius and reconstruct attack timelines by correlating endpoint, identity, network, and log telemetry.
• Execute containment actions such as host isolation, account disablement, and indicator blocking.
• Collect and preserve evidence while maintaining sound chain of custody.
• Support the incident response lead on P1 incidents by providing scoping, evidence, and timeline reconstruction.
• Partner with ThreatOps, SecOps Engineering, IT, and application teams to validate findings and coordinate remediation.
• Tune detection logic to reduce false positives, documenting rationale and risk accepted for every suppression or threshold change.
• Track recurring alert patterns and identify candidates for automation.
• Maintain and improve triage runbooks so investigative steps are repeatable across the team.
• Participate in tabletop exercises and response drills to build and maintain readiness.

About You

Minimum Qualifications

• 1+ year in an information security analyst or SOC analyst role
• 3+ years of experience in a technology role
• Bachelor's degree in information assurance, computer science, or a related field, or equivalent experience
• Hands-on experience with a SIEM, including log search, correlation, and alert triage across large structured and unstructured data sets
• Working knowledge of endpoint detection and response tooling and the investigative workflow it supports
• Proficiency in operating systems (Windows, macOS, Linux/Unix, mobile) and core network theory, including common protocols and basic traffic analysis
• Ability to read and interpret scripts, and to write basic scripts or queries in support of an investigation
• Familiarity with common attacker techniques and a recognized classification framework such as MITRE ATT&CK
• Working understanding of the incident response lifecycle and the ability to apply it to live incidents
• Clear written communication — able to document an investigation so a colleague can pick it up without a verbal handoff
• Schedule flexibility — available to work outside standard business hours, including evenings, weekends, and holidays, as incident severity and volume demand

What You Will Get

• comprehensive health and wellness benefits
• continuous learning opportunities
• industry-leading tools and technologies
• a collaborative culture that celebrates wins big and small
• competitive compensation
• flexible work arrangements
• the chance to work on problems that genuinely matter — protecting the financial futures of millions while building your own career in one of the most dynamic areas of cybersecurity

About Us

Rocket India, registered as NSM Services Private Limited and formerly Mr. Cooper, is a wholly owned subsidiary of Rocket Mortgage, LLC, headquartered in Detroit, Michigan. As a core part of Rocket's global ecosystem, Rocket India helps shape the future of home financing through technology, innovation, operations, product, and customer-focused solutions. Our teams build scalable platforms and digital experiences that simplify mortgage origination and servicing while supporting Rocket's mission to "Help Everyone Home." We are committed to providing a fair and inclusive workplace for all team members and applicants. All qualified applicants will receive consideration for employment without regard to sex, religion, caste, disability, or gender identity, consistent with applicable Indian law, including the Constitution of India, the Code on Wages, 2019, the Rights of Persons with Disabilities Act, 2016, and the Transgender Persons (Protection of Rights) Act, 2019. We welcome applications from persons with disabilities and from all sections of society. As part of the ecosystem of Rocket we transform talented candidates into passionate team members who thrive in our world of opportunities. Join us in our mission to shape the future of our industries and make a lasting impact in our communities and beyond.