Lead Information Security Analyst (Individual Contributor)

Applied Materials India; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Applied Materials India is seeking a Lead Information Security Analyst to direct security operations within their SOC. This senior-level role requires expertise in threat detection, incident response, and development of SOC tooling.

The ideal candidate will have 6–9 years of experience in cybersecurity operations with proficiency in cloud security and scripting. Join Applied Materials to contribute to innovative solutions in materials engineering.

Qualifications

• 6–9 years of experience in cybersecurity with SOC operations and incident response.
• Hands-on experience as a Tier 2 / Tier 3 analyst leading high-severity investigations.
• Exposure to global, 24x7 SOC environments.

Responsibilities

• Lead alert triage and event analysis in the SOC.
• Investigate and contain high-severity incidents as incident commander.
• Develop detection content and support threat hunting.

Skills

SOC operations expertise

Detection development and tuning

Threat hunting

Communication skills

Problem-solving skills

Education

Bachelor’s or Master’s in Cybersecurity, Computer Science, or related field

Tools

SIEM

SOAR

EDR/XDR

Python

PowerShell

Job description

Overview

Applied Materials is a global leader in materials engineering solutions used to produce virtually every new chip and advanced display in the world. We design, build and service cutting-edge equipment that helps our customers manufacture display and semiconductor chips – the brains of devices we use every day. As the foundation of the global electronics industry, Applied enables the exciting technologies that literally connect our world – like AI and IoT. If you want to push the boundaries of materials science and engineering to create next generation technology, join us to deliver material innovation that changes the world.

Role Summary

The Lead Information Security Analyst is a senior, hands-on security operations professional who directs the day-to-day work of threat detection, alert triage, and incident response within the Security Operations Center (SOC). The role combines deep technical expertise with technical and shift leadership to ensure consistent analyst performance, high-quality investigations, and reliable operational outcomes.

Core Responsibilities

• Lead alert triage and event analysis across SIEM, EDR/XDR, cloud, and identity telemetry; manage alert queues, escalations, and SLAs.
• Investigate and contain complex, high-severity incidents (Tier 2/3) as technical lead or incident commander, maintaining high-quality case management and stakeholder communication.
• Develop and tune detection content, produce IOCs/IOAs, and support threat hunting mapped to MITRE ATT&CK to improve coverage and reduce false positives.
• Operate and improve SOC tooling and automation (SIEM/SOAR), maintain metrics and dashboards, and support vulnerability remediation and cloud/on-prem reviews.
• Uphold security standards, compliance, and audit requirements, and mentor analysts while driving awareness, training, and post-incident improvements.

Key Requirements

• Strong, hands-on expertise in SOC operations, SIEM/SOAR, EDR/XDR, and the incident response lifecycle (NIST SP 800-61).
• Proficiency in event/log correlation, detection development and tuning, and threat hunting using MITRE ATT&CK, IOCs, and TTPs.
• Working knowledge of cloud security (Azure/AWS/GCP), identity security (Entra ID/Okta/AD), and scripting/automation (Python, PowerShell, KQL/SPL).
• Understanding of security frameworks, vulnerability management, and governance/compliance, plus strong communication and problem-solving skills.

Education

Bachelor’s or Master’s in Cybersecurity, Computer Science, or related field (or equivalent practical experience).

Experience

6–9 years of experience in cybersecurity, including hands-on SOC operations, security monitoring, incident response, and event analysis. Tier 2 / Tier 3 (senior analyst) experience leading complex, high-severity investigations. Exposure to a global, 24x7 SOC environment.

Certifications (Preferred)

CompTIA CySA+ / SecurityX, or equivalent. GIAC (GCIA, GCIH, GCFA, GCED) or SANS GSOC (SEC450). Microsoft SC-200 / AZ-500 or equivalent; CISSP or CISM a plus.

Additional Information

• Time Type: Full time
• Employee Type: Assignee / Regular
• Travel: Yes, 10% of the Time
• Relocation Eligible: Yes

Applied Materials is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, national origin, citizenship, ancestry, religion, creed, sex, sexual orientation, gender identity, age, disability, veteran or military status, or any other basis prohibited by law.