Security Analyst

NK Securities Research; Gurugram District; In loco; INR 1.200.000 - 1.800.000; Tempo pieno

Vantaggi offerti da questo lavoro

Competitive salary package

Catered breakfast and lunch

Career growth and development

Descrizione del lavoro

NK Securities Research is seeking a Security Analyst to run our SOC and own compliance with SEBI's CSCRF in a fast-paced, low-latency trading environment. You will monitor, detect, and respond to threats across trading and corporate infrastructure, owning CSCRF and other regulatory filings.

The role requires 2-5 years in SOC or security compliance, strong networking, SIEM/EDR experience, and familiarity with CSCRF/NIST ISO standards.

Competenze

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 2-5 years of experience in a SOC, incident response, or security compliance role.
• Strong networking fundamentals (TCP/IP, routing, VLANs, multicast, firewalls) and experience analysing packet captures with tools like Wireshark, Zeek, or Suricata
• Hands-on experience with a SIEM (Splunk, QRadar, Sentinel, or similar) and EDR tools
• Working knowledge of Linux and common attack techniques (MITRE ATT&CK)
• Familiarity with CSCRF, ISO 27001, NIST CSF, or CERT-In directions
• Experience in the financial industry, preferably a SEBI-regulated entity, including preparing regulatory submissions and audit documentation
• Certifications such as CEH, Security+, GCIH, CISA, CISSP, or ISO 27001 Lead Implementer/Auditor
• Scripting or automation experience (Python, SOAR) and familiarity with cloud security (AWS, Azure)
• Strong written communication, analytical skills, and attention to detail

Mansioni

• Own day-to-day SOC monitoring: watch, triage, and act on all security alerts across endpoints, servers, network, and cloud using SIEM, EDR, and other tools
• Investigate and elevate security incidents, and carry out first-level containment and response
• Analyse network traffic, flow data, and IDS/IPS alerts to detect anomalies across environments
• Map the firm's controls and SOC capabilities to CSCRF requirements, run gap assessments, and track remediation with clear owners and timelines
• Own the preparation and timely submission of periodic CSCRF reports, cyber audit reports, and other filings to SEBI
• Perform log analysis and threat hunting, and build and tune SIEM use cases and response playbooks
• Handle incident reporting to SEBI and CERT-In within prescribed timelines
• Support cyber audits, VAPT exercises, and BCP/DR and incident response drills, and drive closure of findings
• Maintain compliance documentation, policies, and audit evidence so the firm is always inspection-ready
• Track regulatory circulars and translate them into actionable internal requirements
• Work with the network team to review firewall rules, segmentation, and exchange connectivity from a security standpoint
• Support vulnerability management and review privileged access to production and trading systems
• Coordinate with trading, systems, and development teams to implement controls that do not impact latency

Conoscenze

SOC operations

Incident response

Regulatory compliance

Threat detection

Cloud security

Network fundamentals

Scripting (Python)

Formazione

Bachelor's degree in Computer Science/IT/Cybersecurity

Strumenti

Splunk

QRadar

Zeek

Wireshark

Suricata

Linux

Python

SOAR

Descrizione del lavoro

About Us

NK Securities Research is a leading financial firm that leverages cutting edge technology and sophisticated algorithms to trade the financial markets. Founded in 2011, we have gained invaluable experience in the field of High Frequency Trading across different asset classes.

We are seeking a Security Analyst to run our SOC and own our compliance with SEBI's Cybersecurity and Cyber Resilience Framework (CSCRF), including all regulatory reporting and documentation, in a fast-paced, low-latency trading environment.

Key Responsibilities:

As a Security Analyst, you will monitor, detect, and respond to threats across our trading and corporate infrastructure, and own the compliance reporting that goes to SEBI and other regulators. You will work closely with the network, systems, trading, and development teams.

• Own day-to-day SOC monitoring: watch, triage, and act on all security alerts across endpoints, servers, network, and cloud using SIEM, EDR, and other tools
• Investigate and elevate security incidents, and carry out first-level containment and response
• Analyse network traffic, flow data, and IDS/IPS alerts to detect anomalies across environments
• Map the firm's controls and SOC capabilities to CSCRF requirements, run gap assessments, and track remediation with clear owners and timelines
• Own the preparation and timely submission of periodic CSCRF reports, cyber audit reports, and other filings to SEBI
• Perform log analysis and threat hunting, and build and tune SIEM use cases and response playbooks
• Handle incident reporting to SEBI and CERT-In within prescribed timelines
• Support cyber audits, VAPT exercises, and BCP/DR and incident response drills, and drive closure of findings
• Maintain compliance documentation, policies, and audit evidence so the firm is always inspection-ready
• Track regulatory circulars and translate them into actionable internal requirements
• Work with the network team to review firewall rules, segmentation, and exchange connectivity from a security standpoint
• Support vulnerability management and review privileged access to production and trading systems
• Coordinate with trading, systems, and development teams to implement controls that do not impact latency

Preferred Qualifications:

We're seeking candidates with:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field
• 2-5 years of experience in a SOC, incident response, or security compliance role
• Strong networking fundamentals (TCP/IP, routing, VLANs, multicast, firewalls) and experience analysing packet captures with tools like Wireshark, Zeek, or Suricata
• Hands-on experience with a SIEM (Splunk, QRadar, Sentinel, or similar) and EDR tools
• Working knowledge of Linux and common attack techniques (MITRE ATT&CK)
• Familiarity with CSCRF, ISO 27001, NIST CSF, or CERT-In directions
• Experience in the financial industry, preferably a SEBI-regulated entity, including preparing regulatory submissions and audit documentation
• Certifications such as CEH, Security+, GCIH, CISA, CISSP, or ISO 27001 Lead Implementer/Auditor
• Scripting or automation experience (Python, SOAR) and familiarity with cloud security (AWS, Azure)
• Strong written communication, analytical skills, and attention to detail

What We Offer:

• Competitive salary package
• Opportunity to work in a dynamic and collaborative environment
• Career growth and development opportunities
• Catered breakfast and lunch