IT Analyst

YDU JC Air Cond & Ref Inc.- Dubai; Bengaluru; On-site; INR 600,000 - 1,200,000; Full time

Job summary

Johnson Controls is seeking a Security Operations/Incident Response professional to investigate security alerts, drive containment actions and develop scalable detection strategies. You will work across security, IT and business units to improve resilience and reduce risk.

The role emphasizes automation, playbooks and cross‑functional collaboration. The ideal candidate brings hands‑on experience with SIEM/EDR, cloud security, and common security frameworks, plus strong communication to explain

Qualifications

• Experience in security operations and incident response in complex environments.
• Familiarity with MITRE ATT&CK, event correlation and baselining concepts.
• Hands-on with SIEM/EDR tools and cloud security platforms.
• Strong communication, documentation and cross-functional collaboration.

Responsibilities

• Investigate and respond to security alerts and incidents with root cause analysis.
• Lead incident response efforts and coordinate across teams to contain threats.
• Improve detection and response processes through automation and playbooks.
• Identify and strengthen threat detection and prevention capabilities.
• Collaborate with security, IT and business teams for joint response planning.

Skills

Security Operations

Incident Response

Threat Hunting

Analytical thinking

Communication

Cross-functional teamwork

Education

Security+

CySA+

Microsoft SC-200

GSEC

Tools

SIEM

EDR/XDR

Firewalls

WAF

Cloud security tools

Splunk

CrowdStrike

Palo Alto

Zscaler

M365 Defender

Job description

Build your best future with the Johnson Controls team As a global leader in smart, healthy and sustainable buildings, our mission is to reimagine the performance of buildings to serve people, places and the planet. Join a winning team that enables you to build your best future! Our teams are uniquely positioned to support a multitude of industries across the globe. You will have the opportunity to develop yourself through meaningful work projects and learning opportunities. We strive to provide our employees with an experience, focused on supporting their physical, financial, and emotional wellbeing. Become a member of the Johnson Controls family and thrive in an empowering company culture where your voice and ideas will be heard – your next great opportunity is just a few clicks away!

What you will do:

• Investigate and respond to security alerts and incidents, performing root cause analysis and driving corrective actions.
• Lead and support incident response efforts, coordinating across teams to contain and remediate threats.
• Continuously improve detection and response processes through automation, runbook development, and SOP creation.
• Identify and strengthen threat detection and prevention capabilities.
• Integrate threat intelligence into operational workflows to proactively address emerging threats.
• Collaborate with Security, IT, and Business teams to enhance readiness and resilience through joint response planning.

What You’ll Need to Succeed

• Extensive experience in Security Operations and Incident Response, with a strong track record of handling complex incidents.
• Proficiency with modern cybersecurity tools (EDR, SIEM, firewalls, WAF, identity, and cloud security platforms).
• Experience operationalizing threat intelligence and developing detection strategies for evolving threats.
• Strong analytical and problem-solving skills, with a focus on process rigor and continuous improvement.
• Ability to drive action and influence outcomes in fast-paced, cross-functional environments.
• Excellent communication and collaboration skills, with a team-first mindset and mentoring capabilities.

What we look for:

• Required 1–3 years in a SOC, incident response, IT security operations, or adjacent role (e.g., EDR admin, blue team intern/co-op).
• Experience with at least one of: SIEM, EDR/XDR, secure email gateway, cloud security tools (M365 Defender suite, Defender for Endpoint, Sentinel, Splunk, CrowdStrike, Palo Alto, Zscaler, etc.).
• Familiarity with core investigation concepts: event correlation, user/host baselining, MITRE ATT&CK, common malware/TTPs, phishing indicators.
• Strong communication skills—able to explain technical issues to non-technical users and document clearly and concisely.
• Understanding of basic networking (TCP/IP, DNS, HTTP, VPN) and Windows/Linux fundamentals (processes, services, logs, registry, authentication).
• Ability to work in a ticket-driven environment with SLAs and handoffs to an MSSP.
• Inquisitive personality that lends itself to question asking and research.
• Preferred Exposure to manufacturing/OT environments (ICS/SCADA basics, Purdue model, segmentation concepts, remote access risks).
• Experience with SOAR workflows and playbooks; basic scripting (PowerShell, Python, KQL) for triage automation.
• Knowledge of identity security (AAD, MFA, conditional access), email security, and cloud log sources.
• Certifications: Security+, CySA+, Microsoft SC‑200, GSEC, or equivalent.

Johnson Controls: Enhancing the Intelligence of Buildings Your buildings have a purpose. They are places for people to live or work. Facilities for learning or healing. Venues for entertainment and shopping. Sites for the specialized storage of tangible goods or mission-critical data. Your buildings have a huge variety of functions; they are central to your mission. This is where Johnson Controls comes in, helping drive the outcomes that matter most. Through a full range of systems and digital solutions, we make your buildings smarter. A smarter building is safer, more comfortable, more efficient, and, ultimately, more sustainable. Most important, smarter buildings let you focus more intensely on your unique mission. Better for your people. Better for your bottom line. Better for the planet. At Johnson Controls, we’ve been making buildings smarter since 1885, and our capabilities, depth of innovation experience, and global reach have been growing ever since. Today, we offer the world’s largest portfolio of building products, technologies, software, and services; we put that portfolio to work to transform the environments where people live, work, learn and play.