Security Analyst

SHI; Hyderabad; Remote; INR 600,000 - 1,200,000; Full time

Job summary

SHI is seeking an Associate Security Analyst - SOC with 2–5 years of active SOC experience specializing in Sum o Logic and Palo Alto Cortex XDR. The role involves monitoring security events, triaging incidents, and contributing to incident response in a remote/home-office setup.

Responsibilities include analyzing phishing attempts, investigating incidents, maintaining tickets, and supporting SOP development while staying updated on evolving threats and best practices.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field.
• Knowledge of security principles and industry standards.
• Certifications such as Security+, CEH or equivalent are a plus.

Responsibilities

• Monitor and triage security alerts and events across SIEM/XDR platforms.
• Analyze phishing emails, suspicious URLs, impersonation attempts, and business email compromise indicators.
• Conduct initial analysis of security incidents and escalate to senior analysts as needed.
• Document and manage incident tickets per SOC procedures.
• Contribute to SOPs and provide timely incident reporting to management.
• Participate in threat hunting and collaborate with IT and security teams to remediate vulnerabilities.
• Stay informed on current threats and security best practices.

Skills

Communication skills

Problem solving

Data analysis

Collaboration

Initiative

Education

Bachelor's degree in Cybersecurity or related field

Tools

Sumo Logic

Palo Alto Cortex XDR

Job description

We are hiring an Associate Security Analyst - SOC with 2 to 5 years of experience specializing in Sumo Logic and Palo Alto Cortex XDR.

• Role Title: Associate Security Analyst - SOC
• Experience Range: 2 to 5 years in an active SOC environment.
• Mandatory Technical Tools: Sumo Logic (SIEM/Logs) and Palo Alto Cortex XDR (Endpoint/Network).
• Should be Open for 24/7 Support
• Should have excellent Communication Skills.

Job Title: Associate Security Analyst- SOC

Job Description Summary

The Associate Security Analyst- SOC is responsible for supporting the Security Operations Center (SOC) team in monitoring and analyzing security events, incidents, and alerts. This role will assist in identifying potential security threats and vulnerabilities, ensuring the security of our organization's information systems, and contributing to incident response efforts.

This position reports to the Security Operations Manager and is a remote position with a home office setup.

Role Description

• Monitor and triage security alerts and events using various security tools, such as SOAR, SIEM, XDR, firewall, cloud, identity, and email security platforms.
• Analyze reported phishing emails, suspicious URLs, attachments, impersonation attempts, business email compromise indicators and social engineering events.
• Conduct initial analysis of security incidents and accelerate to senior analysts or management as necessary.
• Assist in the investigation of security incidents, including data breaches, malware infections, and unauthorized access attempts.
• Create, update, and manage incident tickets according to SOC procedures.
• Contribute to the development and improvement of standard operating procedures (SOPs) for the SOC.
• Provide timely and accurate reporting on security incidents, activities, and metrics to management.
• Participate in threat hunting activities to proactively identify potential threats and risks.
• Collaborate with other IT and security teams to identify and remediate security vulnerabilities.
• Assist in the implementation and maintenance of security platforms.
• Stay informed about the latest security threats, vulnerabilities, and industry best practices.

Behaviors and Competencies

• Problem-Solving: Can identify problems, propose solutions, and take action to resolve them without explicit instructions.
• Data Analysis: Can identify patterns and trends in data, propose hypotheses, and use statistical techniques to test them.
• Self-Motivation: Can identify personal or professional growth opportunities, propose self-improvement strategies, and take action without explicit instructions.
• Collaboration: Can actively participate in team discussions, respect differing opinions, and collaborate with others to achieve common goals.
• Communication: Can effectively communicate complex ideas and information, and can adapt communication style to the audience.
• Training: Can identify learning gaps within a team, propose training solutions, and take action to implement them without explicit instructions.
• Initiative: Can identify opportunities for improvement, propose solutions, and take action without explicit instructions.
• Detail-Oriented: Can identify errors or inconsistencies in work and make necessary corrections.
• Organization: Can prioritize daily tasks, manage personal workflow, and utilize basic tools to keep track of responsibilities.
• Follow-Up: Can independently track and follow up on tasks without requiring reminders, ensuring responsibilities are fulfilled.

Skill Level Requirements

• The ability to understand and implement best practices and measures for system security to protect organizational data and infrastructure - Basic
• Proficiency in configuring and managing Windows Server and Linux operating systems
• Ability to create clear and effective technical documentation - Basic
• Ability to simplify and effectively communicate complex problems to stakeholders across various functions and levels - Basic
• Experience in managing and maintaining computer systems and networks to ensure optimal performance and security - Basic
• Experience in understanding, managing, and correlating log data for effective security monitoring and analysis - Basic

External Qualifications:

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field.
• Knowledge of cybersecurity principles, security frameworks, and industry standards.
• Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or equivalent are a plus.

Internal Qualifications:

• Strong analytical and problem-solving skills with attention to detail.
• Ability to work in a fast-paced and dynamic environment, handling multiple tasks simultaneously.
• Strong communication skills, both verbal and written.
• Team player with the ability to collaborate effectively with cross-functional teams.

Other Requirements

• Familiarity with security technologies, including SIEM, IDS/IPS, firewalls, identity, and endpoint protection solutions.
• Proficiency in identifying and analyzing common attack techniques, including phishing, social engineering, credential theft, malware, unauthorized access, persistence, and data exfiltration.
• Experience with security incident management and response processes, including the ability to write clear incident and investigation reports.
• Basic understanding of networking protocols and security concepts.
• Knowledge of common operating systems (Windows, Linux, etc.).
• Available to work flexible hours, including overnights, weekends, and on-call support.

Preferred:

• Experience with security orchestration, automation, and response (SOAR) platforms.
• Proficient in log analysis and use of security log management tools.
• Familiarity with cloud security concepts and technologies (AWS, Azure, etc.).
• Exposure to threat intelligence analysis and threat hunting methodologies.
• Knowledge of identity and access management (IAM) principles and technologies.
• Experience with scripting languages (Python, PowerShell, etc.).
• Understanding of web application security and secure coding practices.
• Knowledge of regulatory compliance frameworks (e.g., CIS, PCI DSS).
• Understanding of penetration testing and vulnerability assessment techniques.