Security Analysis SSIRT

Orange Business; Gurugram District; Hybrid; INR 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Flexible work environment

Hybrid work model

Health insurance

Career growth opportunities

Job summary

Orange Business is seeking a Security Analyst to join the Service Security Incident Response Team (SSIRT). You will monitor, detect, analyze, and respond to security incidents affecting services and infrastructure, collaborating with IT and security teams to mitigate risks and improve posture.

You will conduct vulnerability assessments, penetration testing, and threat hunting, contributing to playbooks and automation to enhance incident handling. A hybrid work arrangement in India is supported.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience).
• Relevant certifications such as CISSP, CISM, CEH, or GIAC are preferred.

Responsibilities

• Monitor security alerts and events from SIEM, IDS/IPS, and endpoint security tools.
• Investigate and analyze security incidents to determine severity and impact.
• Perform vulnerability assessments and penetration testing to identify security gaps.
• Collaborate with cross-functional teams to ensure timely incident response and mitigation.
• Document incident details and lessons learned for post-incident analysis.

Skills

Security operations

Incident response

Threat detection

Networking concepts

Communication skills

English proficiency

Scripting

Self-management

Education

Bachelor's degree in CS or Information Security

CISSP/CISM/CEH/GIAC certifications preferred

Tools

SIEM (Splunk, ArcSight)

IDS/IPS

EDR

Threat intelligence tools

Job description

About Us

Join us at Orange Business! We are a network and digital integrator that understands the entire value chain of the digital world, freeing our customers to focus on the strategic initiatives that shape their business. Every day, you will collaborate with a team dedicated to providing consistent, sustainable global solutions, no matter where our customers operate. With over 30,000 employees across Asia, the Americas, Africa, and Europe, we offer a dynamic environment to develop and perfect your skills in a field filled with exciting challenges and opportunities.

About The Role

As a Security Analyst within our Service Security Incident Response Team (SSIRT), you will be at the frontier of defending our company's digital assets and services against cyber threats. Your primary focus will be on monitoring, detecting, analyzing, and responding to security incidents affecting our services and infrastructure. You will collaborate with cross-functional teams to ensure timely incident response, mitigation of security risks, and continuous improvement of our security posture. The Security Analyst will play a key role in vulnerability management, conducting vulnerability assessments and penetration tests to identify and mitigate security weaknesses. The candidate will also be involved in risk management, evaluating security risks and implementing measures to mitigate them effectively. Overall, the Security Analyst will be instrumental in enhancing our organization's security posture and protecting against emerging threats.

Key Result Area

• Incident Detection and Analysis:
• Monitor security alerts and events from various sources, including SIEM, IDS/IPS, and endpoint security tools.
• Investigate and analyze security incidents to determine their severity and impact
• Conduct in-depth analysis of security incidents to determine their nature, impact, and root cause.
• Collaborate with threat intelligence teams to stay updated on emerging threats and attack vectors.
• Incident Response and Mitigation:
• Execute rapid and effective incident response procedures to contain and remediate security incidents.
• Coordinate with relevant teams to implement containment measures, restore services, and minimize impact.
• Document incident details, response actions, and lessons learned for post-incident analysis and improvement.
• Perform security log analysis and correlation to detect suspicious activities and anomalies.
• Provide rapid response to security incidents, including containment, eradication, and recovery.
• Threat Hunting and Vulnerability Management:
• Proactively hunt for potential security threats and indicators of compromise within our environment.
• Perform vulnerability assessments and penetration testing to identify and remediate security gaps.
• Develop and maintain playbooks, response procedures, and automation scripts for efficient incident handling.
• Conduct vulnerability assessments and penetration testing to identify and remediate security weaknesses.
• Security Operations Enhancement:
• Implement and enforce security policies, standards, and procedures.
• Continuously improve SOC processes, workflows, and tools to enhance incident detection and response capabilities.
• Participate in security tool evaluations, deployments, and configuration tuning for optimal performance.
• Contribute to security awareness initiatives and training programs for employees across the organization.
• Collaboration and Communication:
• Work closely with cross-functional teams including IT, network operations, legal, and compliance.
• Communicate security risks, findings, and recommendations to technical and non-technical stakeholders.
• Act as a subject matter expert on security incidents, trends, and best practices within the industry.

Educational Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience).
• Relevant certifications such as CISSP, CISM, CEH, or GIAC are preferred.

Relevant Experience

• Minimum of 4 years of experience in network / cyber security
• Proven experience in a Security Operations Center environment, with focus on incident response & threat detection.
• Strong knowledge of networking concepts, security technologies, and attack vectors.
• Experience with SIEM platforms (e.g., Splunk, ArcSight), IDS/IPS, endpoint detection and response (EDR), and threat intelligence tools.
• Familiarity with incident response frameworks (e.g., NIST CSF, MITRE ATT&CK) and security standards/regulations (e.g., ISO 27001, GDPR, PCI DSS).
• Excellent analytical, problem-solving, and communication skills.
• Ability to work effectively in a fast-paced environment, prioritize tasks, and collaborate across teams.
• Should be completely competent in Microsoft Office applications, specifically Excel, Access, PowerPoint and Word.
• Scripting, Automation knowledge will be added advantage.

Desired Skills/knowledge

• Proven experience in a Security Operations Center environment, with focus on incident response & threat detection.
• Strong knowledge of networking concepts, security technologies, and attack vectors.
• Experience with SIEM platforms (e.g., Splunk, ArcSight), IDS/IPS, endpoint detection and response (EDR), and threat intelligence tools.
• Familiarity with incident response frameworks (e.g., NIST CSF, MITRE ATT&CK) and security standards/regulations (e.g., ISO 27001, GDPR, PCI DSS).
• Strong communication and interpersonal skills, with the ability to effectively interact with stakeholders at all levels of the organization.
• Excellent verbal & written communication skills in English language
• Innovative thinking and leadership with an ability to lead and motivate transversal teams.
• Have good knowledge of the change and release management process.
• Ability to research and stay up to date with security trends, as well as changing government and state laws / standards.
• Willing to work in flexible support environment.
• Self-Management, Decision-making and Customer Oriented Attitude
• Can Do Attitude
• Transversal working across Teams

What We Offer

• Global Opportunities: Work in multi-national teams with opportunity to collaborate with colleagues and customers from all over the world.
• Flexible Work Environment: Flexible working hours and possibility to combine work from office and home (hybrid ways of working).
• Professional Development: training programs and upskilling/re-skilling opportunities.
• Career Growth: Internal growth and mobility opportunities within Orange.
• Caring and Daring Culture: Health and well-being programs and benefits, diversity & inclusion initiatives, CSR and employee connect events.
• Reward Programs: Employee Referral Program, Change Maker Awards.

Only Your Skills Matter

Regardless of your age, gender identity, race, ethnic origin, religion/belief, sexual orientation, marital status, neurotype, disability, veteran status or appearance, we encourage diversity within our teams because it is a strength for the collective and a vector of innovation. Orange Group is a disabled-friendly company and equal opportunity employer: don't hesitate to tell us about your specific needs.