Security Analyst

Ifinsol Global; Bengaluru; On-site; INR 900,000 - 1,500,000; Part time

Job summary

Ifinsol Global is seeking a Security Analyst in Bangalore to manage and tune the Seceon aiSIEM platform and related SIEM tools. You will own log-source onboarding, rule development, and threat intelligence integration while coordinating with domain teams for log feeds and health maintenance.

The role involves leading threat analysis, incident response, and producing monthly security operations reports. Strong SIEM expertise and incident handling skills are essential for this contract-friendly,

Qualifications

• Experience implementing SIEM platforms and tuning for alert fidelity.
• Hands-on knowledge of log sources, ingestion, and rule writing.
• Ability to map detections to MITRE ATT&CK and coordinate incident response.

Responsibilities

• Own lifecycle management of the SIEM platform including onboarding and tuning.
• Lead threat analysis and security operations for IT environments.
• Onboard new log sources and coordinate with domain teams.
• Develop SIEM SOPs and run books for incident response.
• Manage log retention in line with security policy.
• Coordinate with SIEM OEM for patches and rule development.
• Produce security ops reports for SLA cycles and ad-hoc requests.
• Support security assessments by providing SIEM evidence and logs.

Skills

Seceon aiSIEM

SIEM experience

Log source integration

Threat hunting

Incident response

Education

Bachelor's degree in CS/IT

Tools

Splunk

QRadar

Microsoft Sentinel

ArcSight

LogRhythm

Job description

Role Name: Security Analyst

Experience: 3-8 Years

Job Type: C2H

Project Duration: 6+ Month

Shift Timing: General Shift

Notice Period: Immediate - 30 days

Interview Mode: Virtual

Location: Bangalore

Key Responsibilities

• Own the full lifecycle management of the Seceon aiSIEM platform or other SIEM/SOAR equivalents initial configuration, log source onboarding, correlation rule development, threat intelligence feed integration, policy tuning, and ongoing health maintenance
• Lead threat analysis and security operations for the DoP IT 2.0 environment: continuously monitor SIEM dashboards, investigate high-fidelity alerts, perform threat hunting, and manage the response to confirmed security incidents through the ITSM process
• Onboard new log sources as the environment expands: define ingestion requirements, co-ordinate with domain teams (network, OS, application, DB) to configure syslog/SNMP/API feeds, validate completeness, and tune correlation rules to reduce false positives
• Develop and maintain SIEM-specific SOPs and run books: playbooks for common alert types, major incident response procedures, threat containment steps, and SOAR-style workflow documentation for repeatable investigation tasks
• Manage log retention in alignment with security policy; flag to the Operations Manager and HPE Architect if declared policy deviates from the contractual sizing
• Co-ordinate with SIEM OEM for product patches, custom rule development, and escalation of platform-level defects
• Produce security operations reports for the monthly SLA cycle and ad-hoc DoP requests: threat event summaries, alert volume trends, detection rule effectiveness, and incident response timelines
• Support VAPT activities and security audits by providing SIEM log evidence, alert history, and investigation records

Skills & Competencies

• Deep expertise in Seceon aiSIEM or equivalent SIEM platforms (Splunk, QRadar, Microsoft Sentinel, ArcSight, Logrhythm); proficiency in log source integration, correlation rule authoring, and alert tuning
• Threat detection frameworks: MITRE ATT&CK mapping, threat hunting techniques, and IOC/IOA analysis
• Log source breadth: syslog, Windows Event Logs, netflow/IPFIX, API-based ingestion, and endpoint telemetry
• SOAR concepts: scripted playbook development for automated response and case management (even where a formal SOAR is not deployed)
• Security incident response: triage, containment, forensic log analysis, and structured RCA documentation

Preferred Certifications

CEH / GCIA / CompTIA Security+ or equivalent; Seceon platform training (preferred)