Information Security Analyst - Level 2

Gexel Telecom International Inc.; Pune District; On-site; INR 900,000 - 1,500,000; Full time

Benefits offered by this job

In-house training

Employee referral bonus

Group insurance

Job summary

Hitachi is seeking an Information Security Analyst (Level 2) to play a key role in our Security Operations Center, supporting incident detection and response.

You will monitor SIEM and XDR platforms, investigate incidents, and coordinate with Detection Engineering to optimize threat detection. The role may require 24x7 support and on-call shifts, with opportunities to mentor junior analysts.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, CyberSecurity, IT or related field.
• 3-4 years in a Security Operations Center (SOC) environment.
• 2 years hands-on with enterprise SIEM platforms, preferably Microsoft Sentinel.
• 1 year with cloud-native security operations platforms such as Google SecOps.
• Strong understanding of monitoring, alert triage, incident investigation, and incident response.
• Knowledge of KQL and familiarity with YARA-L.
• Understanding MITRE ATT&CK framework, threat intelligence, and IOcS.
• Experience investigating endpoint, identity, cloud, email, and network security incidents.
• Hands-on exposure to Defender Suite, Google SecOps, Cybereason or similar solutions.
• Solid understanding of risk assessment and vulnerability management.
• Excellent verbal and written communications in English.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents from SIEM/XDR and related platforms.
• Ensure incidents are detected, tracked, documented, and resolved within defined SLAs.
• Investigate incidents escalated by Level 1 Analysts and perform detailed event correlation and root-cause analysis.
• Follow escalation procedures and escalate incidents to appropriate teams when required.
• Mentor and support Level 1 Analysts to improve analytical and investigation capabilities.
• Update and maintain SOC documentation, procedures, knowledge articles, and collaboration platforms (e.g., Confluence).
• Coordinate with the Detection Engineering Team for SIEM tuning, alert optimization, use-case validation, and false-positive reduction.
• Perform incident response and containment activities using approved security tools and procedures.
• Validate relevance and accuracy of security alerts and coordinate improvements where necessary.
• Leverage threat intelligence and Indicators of Compromise (IOCs) during investigations.
• Map attacker techniques and incident findings to MITRE ATT&CK framework.
• Handle customer and stakeholder communications related to security incidents and investigations.
• This role may require support for 24x7 security operations, including rotational shifts, on-call support, and handovers as applicable.
• Exposure to threat hunting activities and methodologies is desirable.

Skills

SOC experience

Incident investigation

Incident response

Threat hunting

KQL

MITRE ATT&CK

Communication skills

English proficiency

Coordination with teams

Education

Bachelor’s degree in Computer Science / Information Security

Tools

Microsoft Sentinel

XDR platforms

Microsoft Defender

Google SecOps

CYBEREASON

Confluence

Job description

JoinHitachiCyberandplayakeyroleinprotectingorganizationsthroughadvancedsecuritymonitoringandincidentresponse.

WearelookingforanInformationSecurityAnalyst(Level2)toplayakeyroleinourSecurityOperationsCenter(SOC),servingas primaryescalationpointforsecurityincidentsandsupportingtheorganization'scyberdefensecapabilities.

TheISAL2willensuretimelyandeffectivedetection,investigation,andresponsetosecurityincidents.Theroleisresponsibleforperformingadvancedincidentanalysis,determiningappropriateescalationpaths,andcoordinatingwiththeTSSandDetectionEngineeringteamstosupportcontinuousimprovementofsecurityoperationsandthreatdetectioncapabilities.

Here’sanoverviewofyourmainresponsibilities:

• Monitor,investigate,andrespondtosecurityalertsandincidentsgeneratedthroughSIEM,XDR,andsecuritymonitoringplatformssuchasMicrosoftSentinel,GoogleSecOps,MicrosoftDefender,MDR/XDRplatforms,andsimilartechnologies.
• Ensureincidentsaredetected,tracked,documented,andresolvedwithindefinedSLAs.
• InvestigateincidentsescalatedbyLevel1Analystsandperformdetailedeventcorrelationandrootcauseanalysis.
• Followestablishedescalationproceduresandescalateincidentstotheappropriateteamswhenrequired.
• MentorandsupportLevel1Analyststoimproveanalyticalandinvestigationcapabilities.
• UpdateandmaintainSOCdocumentation,procedures,knowledgearticles,andcollaborationplatforms(e.g.,Confluence).
• CoordinatewiththeDetectionEngineeringTeamforSIEMtuning,alertoptimization,usecasevalidation,andfalse-positivereduction.
• Performincidentresponseandcontainmentactivitiesusingapprovedsecuritytoolsandprocedures.
• Validatetherelevanceandaccuracyofsecurityalertsandcoordinateimprovementswherenecessary.
• LeveragethreatintelligenceandIndicatorsofCompromise(IOCs)duringinvestigations.
• MapattackertechniquesandincidentfindingstotheMITREATT&CKFramework.
• Handlecustomerandstakeholdercommunicationsrelatedtosecurityincidentsandinvestigations.
• Thisrolemayrequiresupportfor24x7securityoperations,includingrotationalshifts,on-callsupport,andshifthandoversasapplicable.
• Exposuretothreathuntingactivitiesandmethodologiesisdesirable.

Ifyourecognizeyourselfinthefollowing,we’dlovetomeetyou:

• Bachelor’sdegreeincomputerscience,InformationSecurity,CyberSecurity,InformationTechnology,orarelatedfield.
• 3-4yearsofexperienceinaSecurityOperationsCenter(SOC)environment.
• Minimum2yearsofhands-onexperiencewithenterpriseSIEMplatforms,preferablyMicrosoftSentinel.
• Minimum1yearofexperiencewithcloud-nativesecurityoperationsplatformssuchasGoogleSecOps(Chronicle)orequivalenttechnologies.
• Strongunderstandingofsecuritymonitoring,alerttriage,incidentinvestigation,andincidentresponseprocesses.
• KnowledgeofKustoQueryLanguage(KQL)andfamiliaritywithYARA-L.
• GoodunderstandingoftheMITREATT&CKFramework,threatintelligence,andIndicatorsofCompromise(IOCs).
• Experienceinvestigatingendpoint,identity,cloud,email,andnetworksecurityincidents.
• Hands-onexposuretoMicrosoftDefenderSuite,GoogleSecOps,Cybereason,orsimilarendpointdetectionandresponsesolutions.
• Solidunderstandingofriskassessmentandvulnerabilitymanagement.
• ExcellentverbalandwrittencommunicationskillsinEnglish,includingtechnicaldocumentationandincidentreporting.
• Abilitytoworkina24/7SecurityOperationsCenter(SOC)environment.
• WillingtoworkOvertime,StayonStandbyrole(On-Call).

PreferredCertifications

• MicrosoftCertified:SecurityOperationsAnalystAssociate(SC-200)
• MicrosoftAzureSecurityEngineerAssociate(AZ-500)
• GoogleCloudCertified-ProfessionalCloudSecurityEngineer
• GoogleCloudCertified-ProfessionalCloudSecurityOperationsEngineer
• CompTIASecurity+
• OtherMicrosoftSecurityCertificationsrelatedtoSecurityOperations,IncidentResponse,orCloudSecurity.

Whatweoffer:

• Thoroughin-house,experttrainingoncutting-edgetechnology
• EmployeeReferralBonus
• Groupinsuranceplan
• Teamspiritanddedicationtoserviceexcellence
• Asenseofbelongingtoaglobal,brand-nameorganization