JB001661 Security operations Analyst Pune · Hybrid

Techilaservices; Pune District; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Techilaservices in Pune seeks a Senior Security Operations Analyst to bolster enterprise security operations with a focus on AI-enabled threat detection, incident response, and security analytics.

The ideal candidate has 6+ years in SOC/ security operations and hands-on experience with CrowdStrike EDR, NG-SIEM, Zscaler, and DLP. Strong communication and analytical skills are essential for coordinating with stakeholders and maintaining SLAs.

Qualifications

• 6+ years in Security Operations, SOC, or Infrastructure Security environments.
• Hands-on experience in security alert monitoring, triage, investigation, escalation, ticket resolution, and incident management.
• Experience with AI/ML-driven threat detection and security analytics in SIEM/NG-SIEM environments.
• Familiarity with GDPR, PCI-DSS, SOC2 compliance and strong communication skills.

Responsibilities

• Monitor, triage, investigate, resolve, and elevate security alerts and incidents per SOPs and runbooks.
• Analyze security events using CrowdStrike EDR, NG-SIEM, Zscaler, DLP, and related platforms.
• Coordinate with internal teams and end users to validate and investigate potential incidents.
• Document incidents, perform RCA, ensure SLA compliance and timely closure.
• Support AI-enabled threat investigations and threat-hunting activities.

Skills

Security Operations

Incident Management

AI/ML Threat Detection

Communication Skills

Analytical Thinking

Tools

CrowdStrike EDR

CrowdStrike NG-SIEM

Zscaler

DLP

DNS Security

Vulnerability Tools

Firewall / VPN / Proxy

Job description

Role: Senior Security Operations Analyst - AI Security & Threat Operations

Domain: Cyber Security / Security Operations (SOC)

Location: Pune

Experience: 6 to 10 Yrs

About the Position

We are seeking a highly skilled Senior Security Operations Analyst to support enterprise security operations with a focus on modern SOC practices, AI-driven threat detection, incident response, and security analytics. The role requires hands‑on experience in monitoring, investigating, and responding to security incidents while leveraging AI‑enabled security tools and advanced analytics to improve threat detection and operational efficiency.

Technical and Professional Requirements

Mandatory

• Minimum 6 years of experience in Security Operations, SOC, Enterprise Security Support, or Infrastructure Security environments.
• Hands‑on experience in security alert monitoring, incident triage, investigation, escalation, ticket resolution, and incident management.
• Working knowledge of:
• CrowdStrike EDR
• CrowdStrike Next-Gen SIEM
• Zscaler
• DLP
• DNS Security
• Vulnerability Management Tools
• Firewall, Proxy, and VPN Technologies
• Experience in phishing email analysis, vulnerability identification, remediation tracking, log analysis, and security event investigation.
• Good understanding of networking fundamentals including TCP/IP, DNS, DHCP, Routing, Switching, Firewall Policies, VPN, and Proxy concepts.
• Hands‑on experience with AI/ML‑driven threat detection and security analytics, preferably within a SIEM/NG-SIEM environment, including alert analysis, query development, dashboards, and reporting.
• Excellent communication, stakeholder management, analytical, and problem-solving skills.

Preferred

• Experience working in SLA-driven environments with strong documentation and reporting discipline.
• Strong understanding of Linux and Windows operating systems.
• Knowledge of forensic investigation methodologies and threat hunting practices.
• Understanding of compliance and regulatory frameworks such as GDPR, PCI-DSS, and SOC2.
• Certifications such as:
• CISSP
• SSCP
• Security+
• CEH
• SC-200
• AZ-500
• ITIL

Job Responsibilities

Security Operations & Incident Management

• Monitor, triage, investigate, resolve, and elevate security alerts and incidents in accordance with defined SOPs and runbooks.
• Perform security event analysis using CrowdStrike EDR, CrowdStrike Next-Gen SIEM, Zscaler, DLP, and related security platforms.
• Coordinate with internal teams and end users to validate and investigate potential security incidents.
• Support phishing investigations, vulnerability remediation tracking, incident documentation, and RCA activities.
• Ensure timely closure and documentation of incidents and tickets while maintaining SLA compliance.

AI Security Operations

• Utilize AI-driven threat intelligence platforms for threat correlation, analysis, and prioritization.
• Support AI-enabled threat investigations and forensic activities while reducing false positives and identifying actionable threats.
• Leverage AI-powered security analytics tools to identify attack patterns, anomalies, and emerging threats.
• Assist in developing and optimizing AI-based detection use cases and threat-hunting activities.
• Identify trends in AI-generated detections and contribute to false-positive reduction initiatives.

Vulnerability & Risk Management

• Support vulnerability assessment and remediation programs.
• Participate in risk assessments, threat landscape reviews, and security posture evaluations.
• Track remediation efforts and collaborate with stakeholders to address identified security risks.

Threat Hunting & Compliance

• Perform proactive threat hunting and security investigations.
• Assist with forensic analysis of security incidents.
• Support security audits and compliance initiatives related to GDPR, PCI-DSS, SOC2, and organizational security standards.

Process & Documentation

• Develop and maintain incident response procedures, operational runbooks, and security documentation.
• Contribute to security dashboards, operational reporting, and continuous process improvement initiatives.
• Maintain high standards of documentation for incidents, investigations, handovers, and knowledge articles.