Professional Cybersecurity Analyst

Volvo Group; Bengaluru; On-site; INR 900,000 - 1,200,000; Full time

Job summary

Volvo Group is looking for an experienced SOC Analyst to join our cybersecurity team in Bengaluru. You will lead incident response, mentor colleagues, and drive improvements across detection, analysis, and remediation efforts for complex threats.

You will analyze security events, coordinate with IT and vendors, and help shape our security posture through documentation, playbooks, and automation initiatives. A shift-flexible, global-operations mindset is preferred.

Qualifications

• 3-5 years of experience in SIEM/SOAR platforms as a SOC analyst.
• Strong technical expertise in incident response and cybersecurity operations.
• Experience with Splunk and SOAR tools (e.g., XSOAR) for log analysis and automated incident response.
• Knowledge of scripting languages (e.g., Python, PowerShell) to automate tasks.
• Proficient in network and security protocols, firewalls, server environments, LDAP, AD, Microsoft EntraID.
• Strong written and verbal communication skills, with the ability to clearly document investigations and communicate findings to technical and non-technical stakeholders.

Responsibilities

• Conduct in-depth analysis of security events and alerts to identify potential security incidents and vulnerabilities.
• Investigate and respond to security incidents in real-time, utilizing advanced analytical skills to determine the nature and impact of threats.
• Handle complex security incidents, including malware analysis and incident investigations.
• Assess and mitigate vulnerabilities within the IT environment.
• Analyze network traffic, cloud environments, and host systems to uncover evidence of security breach.
• Fine-tune alerts to reduce false positives and suggest new use case creations.
• Collaborate with IT teams, external stakeholders, and vendors to coordinate incident response and remediation efforts.
• Drive incident response activities, ensuring efficient resolution and comprehensive documentation.
• Conduct incident response workshops and train less experienced team members.
• Create, update, and standardize operational procedures and response playbooks.
• Maintain detailed documentation of incidents, responses, and lessons learned to enhance future security measures and participate in cybersecurity development projects as a subject matter expert.
• Actively support in threat-hunting activities.
• Perform quality reviews of investigations and provide actionable feedback for improvement.
• Develop SOC monitoring rules, coordinate with digital forensics teams, and enhance incident response processes.
• Contribute to Playbook automation initiatives by providing actionable suggestions aimed at minimizing manual tasks for analysts.

Skills

SIEM/SOAR expertise

Incident response

Cybersecurity operations

Python

PowerShell

Network security

EntraID/AD

Written communication

Tools

Splunk

XSOAR

LDAP/AD

Microsoft EntraID

Job description

Select how often (in days) to receive an alert:

Transport is at the core of modern society. Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future. If you seek to make a difference on a global scale, working with next-gen technologies and the sharpest collaborative teams, then we could be a perfect match.

We are seeking an experienced SOC Analyst to join our cybersecurity team. As a critical part of the Security Operations Center (SOC), you will act as an individual contributor and a mentor to support your colleagues in detecting, analyzing, and mitigating complex cybersecurity threats. You will lead incident response activities, collaborate with cross-functional teams, and continuously enhance the organization’s security posture.

Key Responsibilities:

• Conduct in-depth analysis of security events and alerts to identify potential security incidents and vulnerabilities
• Investigate and respond to security incidents in real-time, utilizing advanced analytical skills to determine the nature and impact of threats.
• Handle complex security incidents, including malware analysis and incident investigations.
• Assess and mitigate vulnerabilities within the IT environment.
• Analyze network traffic, cloud environments, and host systems to uncover evidence of security breach.
• Fine-tune alerts to reduce false positives and suggest new use case creations.
• Collaborate with IT teams, external stakeholders, and vendors to coordinate incident response and remediation efforts.
• Drive incident response activities, ensuring efficient resolution and comprehensive documentation.
• Conduct incident response workshops and train less experienced team members.
• Create, update, and standardize operational procedures and response playbooks.
• Maintain detailed documentation of incidents, responses, and lessons learned to enhance future security measures and participate in cybersecurity development projects as a subject matter expert.
• Actively support in threat-hunting activities.
• Perform quality reviews of investigations and provide actionable feedback for improvement.
• Develop SOC monitoring rules, coordinate with digital forensics teams, and enhance incident response processes.
• Contribute to Playbook automation initiatives by providing actionable suggestions aimed at minimizing manual tasks for analysts.

Qualifications:

• 3-5 years of experience in SIEM/SOAR platforms as a SOC analyst.
• Strong technical expertise in incident response, and cybersecurity operations.
• Experience with Splunk and SOAR tools (e.g., XSOAR) for log analysis and automated incident response.
• Knowledge of scripting languages (e.g., Python, PowerShell) to automate tasks.
• Proficient in network and security protocols, firewalls, server environments, LDAP, AD, Microsoft EntraID. and attack methodologies.
• Strong written and verbal communication skills, with the ability to clearly document investigations and communicate findings to technical and non-technical stakeholders.

Certifications (Preferred):

Certified SOC Analyst (CSA), Certified Ethical Hacker (CEH), or equivalent certifications.

Soft Skills:

• Strong communication, presentation, and collaboration skills.
• Analytical and critical thinking abilities.
• Sense of urgency and effective prioritization in high-pressure situations.
• Positive mindset and conflict resolution expertise.

ITIL Skills (Preferred):

Incident Management, Problem Management, and Audit/Assessment Experience.

Why Join Us?

Opportunity to work on cutting-edge cybersecurity initiatives.

Be part of a collaborative and forward-thinking team.

Continuous learning and career development opportunities in the cybersecurity domain.

Incident Management, Problem Management, and Audit/Assessment Experience.

Work Schedule: Seeking candidates who are flexible with shift schedules, including weekend coverage as per business requirements

We value your data privacy and therefore do not accept applications via mail.

Volvo Group Digital Technology & Operations (DTO) is a new division. The organizational set up is structured around domains, digital products with functions for digital excellence to deliver outstanding customer experience.

Joining the new DTO division means being part of a fast-moving digital product-oriented organization where teams truly own what they build from idea to delivery. In DTO, we work in agile, cross-functional teams, mastering the latest technology, and creating outstanding digital experiences that make a real difference for our colleagues and Volvo Group customers around the world. We put people first and build our culture on trust, passion, customer success, change, and performance. If you want to grow, collaborate across functions and entities, and help shape the future of digital products within Volvo Group, DTO is a great place to be.

Job Category: Information Technology

Organization: Volvo Group Digital Technology & Operations

Every day, Volvo Group products and services ensure that people have food on the table, children arrive safely at school and roads and buildings can be constructed. Looking ahead,we are committed to driving the transition to sustainable and safe transport, mobility and infrastructure solutions toward a net-zero society.

Joining Volvo Group, you will work with some of the world’s most iconic brands and be part of a global and leading industrial company that is harnessing automated driving, electromobility and connectivity.

Our people are passionate about what they do, they aim for high performance and thrive on teamwork and learning. Everyday life at Volvo is defined by a climate of support, care and mutual respect.

If you aspire to grow and make an impact, join us on our journey to create a better and more resilient society for the coming generations.