Security Analysis SSIRT

Orange; Gurugram District; Hybrid; INR 2,400,000 - 3,400,000; Full time

Benefits offered by this job

Global opportunities

Flexible hybrid work

Training & development

Career growth

Health & well-being programs

Referral & recognition programs

Job summary

Orange Business is seeking a Security Analyst to join its Service Security Incident Response Team (SSIRT). You will monitor and analyze security incidents, coordinate rapid containment, and drive improvements in vulnerability management and risk reduction across services and infrastructure.

You will collaborate with IT, legal and compliance, conducting assessments and tests, while applying frameworks like NIST and MITRE to protect assets and enhance security posture.

Qualifications

• Bachelor's degree in a related field; professional security certifications preferred.
• 4+ years in security operations, incident response and threat detection.
• Strong knowledge of networking, security tech, and attack vectors.
• Experience with SIEM platforms (Splunk/ArcSight), EDR and threat intel.

Responsibilities

• Monitor and analyze security incidents across services and infrastructure.
• Lead incident response, containment, eradication, and recovery actions.
• Perform vulnerability assessments and conduct tests to mitigate weaknesses.
• Improve SOC processes, playbooks, and automation for faster responses.
• Coordinate with IT, legal, and compliance; communicate risk and findings.

Skills

SIEM

EDR

Incident response

Threat intelligence

Vulnerability assessment

Penetration testing

ISO 27001

GDPR

Communication

Scripting

Education

Bachelor's degree in Computer Science, Information Security, or related field

CISSP

CISM

CEH

GIAC

Tools

Splunk

ArcSight

IDS/IPS

EDR

Threat intelligence tools

Job description

Orange Business is here!

About us

Join us at Orange Business!We are a network and digital integrator that understands the entire value chain of the digital world, freeing our customers to focus on the strategic initiatives that shape their business.Every day, you will collaborate with a team dedicated to providing consistent, sustainable global solutions, no matter where our customers operate. With over 30,000 employees across Asia, the Americas, Africa, and Europe, we offer a dynamic environment to develop and perfect your skills in a field filled with exciting challenges and opportunities.

About the role

As a Security Analyst within our Service Security Incident Response Team (SSIRT), you will be at the forefront of defending our company's digital assets and services against cyber threats. Your primary focus will be on monitoring, detecting, analyzing, and responding to security incidents affecting our services and infrastructure. You will collaborate with cross-functional teams to ensure timely incident response, mitigation of security risks, and continuous improvement of our security posture.

The Security Analyst will play a key role in vulnerability management, conducting vulnerability assessments and penetration tests to identify and mitigate security weaknesses. The candidate will also be involved in risk management, evaluating security risks and implementing measures to mitigate them effectively. Overall, the Security Analyst will be instrumental in enhancing our organization's security posture and protecting against emerging threats.

About you

Key Result Area

• Incident Detection and Analysis: Monitor security alerts and events from various sources, including SIEM, IDS/IPS, and endpoint security tools, investigate and analyze security incidents to determine their severity and impact, conduct in-depth analysis of security incidents to determine their nature, impact, and root cause, collaborate with threat intelligence teams to stay updated on emerging threats and attack vectors.
• Incident Response and Mitigation: Execute rapid and effective incident response procedures to contain and remediate security incidents, coordinate with relevant teams to implement containment measures, restore services, and minimize impact, document incident details, response actions, and lessons learned for post-incident analysis and improvement, perform security log analysis and correlation to detect suspicious activities and anomalies, provide rapid response to security incidents, including containment, eradication, and recovery.
• Threat Hunting and Vulnerability Management: Proactively hunt for potential security threats and indicators of compromise within our environment, perform vulnerability assessments and penetration testing to identify and remediate security gaps, develop and maintain playbooks, response procedures, and automation scripts for efficient incident handling, conduct vulnerability assessments and penetration testing to identify and remediate security weaknesses.
• Security Operations Enhancement: Implement and enforce security policies, standards, and procedures, continuously improve SOC processes, workflows, and tools to enhance incident detection and response capabilities, participate in security tool evaluations, deployments, and configuration tuning for optimal performance, contribute to security awareness initiatives and training programs for employees across the organization.
• Collaboration and Communication: Work closely with cross-functional teams including IT, network operations, legal, and compliance, communicate security risks, findings, and recommendations to technical and non-technical stakeholders, act as a subject matter expert on security incidents, trends, and best practices within the industry.

Educational Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience).
• Relevant certifications such as CISSP, CISM, CEH, or GIAC are preferred.

Relevant Experience

• Minimum of 4 years of experience in network / cyber security
• Proven experience in a Security Operations Center environment, with focus on incident response & threat detection.
• Strong knowledge of networking concepts, security technologies, and attack vectors.
• Experience with SIEM platforms (e.g., Splunk, ArcSight), IDS/IPS, endpoint detection and response (EDR), and threat intelligence tools.
• Familiarity with incident response frameworks (e.g., NIST CSF, MITRE ATT&CK) and security standards/regulations (e.g., ISO 27001, GDPR, PCI DSS).
• Excellent analytical, problem-solving, and communication skills.
• Ability to work effectively in a fast-paced environment, prioritize tasks, and collaborate across teams.
• Should be completely competent in Microsoft Office applications, specifically Excel, Access, PowerPoint and Word.
• Scripting, Automation knowledge will be added advantage.

Desired skills/knowledge

• Proven experience in a Security Operations Center environment, with focus on incident response & threat detection.
• Strong knowledge of networking concepts, security technologies, and attack vectors.
• Experience with SIEM platforms (e.g., Splunk, ArcSight), IDS/IPS, endpoint detection and response (EDR), and threat intelligence tools.
• Familiarity with incident response frameworks (e.g., NIST CSF, MITRE ATT&CK) and security standards/regulations (e.g., ISO 27001, GDPR, PCI DSS).
• Strong communication and interpersonal skills, with the ability to effectively interact with stakeholders at all levels of the organization.
• Excellent verbal & written communication skills in English language.
• Innovative thinking and leadership with an ability to lead and motivate transversal teams.
• Have good knowledge of the change and release management process.
• Ability to research and stay up to date with security trends, as well as changing government and state laws / standards.
• Willing to work in flexible support environment.
• Self-Management, Decision-making and Customer Oriented Attitude
• Can Do Attitude
• Transversal working across Teams

You bring passion, energy, taste for exploration and adaptability. You seek the opportunity to expand your knowledge and develop new skills.

What we offer

• Global Opportunities: Work in multi-national teams with opportunity to collaborate with colleagues and customers from all over the world.
• Flexible Work Environment: Flexible working hours and possibility to combine work from office and home (hybrid ways of working).
• Professional Development: training programs and upskilling/re-skilling opportunities.
• Career Growth: Internal growth and mobility opportunities within Orange.
• Caring and Daring Culture: Health and well-being programs and benefits, diversity & inclusion initiatives, CSR and employee connect events.
• Reward Programs: Employee Referral Program, Change Maker Awards.

Only your skills matter

Regardless of your age, gender identity, race, ethnic origin, religion/belief, sexual orientation, marital status, neurotype, disability, veteran status or appearance, we encourage diversity within our teams because it is a strength for the collective and a vector of innovation. Orange Group is a disabled-friendly company and equal opportunity employer: don't hesitate to tell us about your specific needs.