Security Analyst

SHI Solutions India Pvt. Ltd.; Hyderabad; Remote; INR 900,000 - 1,200,000; Full time

Job summary

SHI Solutions India Pvt. Ltd. seeks an Associate Security Analyst for its SOC in Hyderabad.

The role focuses on monitoring security events, triaging alerts, and supporting incident response from a remote home office setup. You will collaborate with IT and security teams to identify threats and strengthen defenses. Ideal candidates hold a Cybersecurity degree and certifications such as CompTIA Security+, CEH, CySA+, GSEC, or SSCP, with strong communication and analytical skills to report findings

Qualifications

• Bachelor's degree in Cybersecurity or related field.
• Certifications such as CompTIA Security+, CEH, CySA+, GSEC, or SSCP preferred.
• Experience with SIEM, SOAR, XDR, firewall, cloud, identity and email security platforms.
• Strong communication and analytical skills and ability to work in a fast-paced SOC environment.

Responsibilities

• Monitor and triage security alerts using SIEM, SOAR, XDR, and related tools.
• Analyze phishing emails, malicious URLs, and impersonation attempts.
• Initial analysis of incidents and escalate as needed.
• Assist investigations of data breaches and malware infections.
• Create and manage incident tickets per SOC procedures.
• Support SOP development and SOC process improvements.
• Provide timely incident reports and security metrics to management.
• Participate in threat hunting to identify risks.
• Collaborate with IT and security teams to remediate vulnerabilities.
• Assist in implementing and maintaining security platforms.
• Stay updated on threats and best practices.

Skills

Communication skills

Analytical thinking

Team player

Self-motivation

Threat monitoring

Education

Bachelor's degree in Cybersecurity or related field

CompTIA Security+

CEH

CySA+

GSEC

SSCP

Job description

Passionate about Cybersecurity, Threat Monitoring, and Incident Response?

Join the SHI India Security Operations Center (SOC) team in Hyderabad!

• Excellent communication skills are a must.
• At least one globally recognized cybersecurity certification: CompTIA Security+, CEH, CySA+, GSEC, or SSCP.
• Candidates interviewed for an SHI SOC role within the last 2 months are requested not to apply.
• Immediate joiners only.

Job Description Summary

The Associate Security Analyst- SOC is responsible for supporting the Security Operations Center (SOC) team in monitoring and analyzing security events, incidents, and alerts. This role will assist in identifying potential security threats and vulnerabilities, ensuring the security of our organization's information systems, and contributing to incident response efforts.

This position reports to the Security Operations Manager and is a remote position with a home office setup.

Role Description

• Monitor and triage security alerts and events using various security tools, such as SOAR, SIEM, XDR, firewall, cloud, identity, and email security platforms.
• Analyze reported phishing emails, suspicious URLs, attachments, impersonation attempts, business email compromise indicators and social engineering events.
• Conduct initial analysis of security incidents and elevate to senior analysts or management as necessary.
• Assist in the investigation of security incidents, including data breaches, malware infections, and unauthorized access attempts.
• Create, update, and manage incident tickets according to SOC procedures.
• Contribute to the development and improvement of standard operating procedures (SOPs) for the SOC.
• Provide timely and accurate reporting on security incidents, activities, and metrics to management.
• Participate in threat hunting activities to proactively identify potential threats and risks.
• Collaborate with other IT and security teams to identify and remediate security vulnerabilities.
• Assist in the implementation and maintenance of security platforms.
• Stay informed about the latest security threats, vulnerabilities, and industry best practices.

Behaviors and Competencies

• Problem-Solving: Can identify problems, propose solutions, and take action to resolve them without explicit instructions.
• Data Analysis: Can identify patterns and trends in data, propose hypotheses, and use statistical techniques to test them.
• Self-Motivation: Can identify personal or professional growth opportunities, propose self-improvement strategies, and take action without explicit instructions.
• Collaboration: Can actively participate in team discussions, respect differing opinions, and collaborate with others to achieve common goals.
• Communication: Can effectively communicate complex ideas and information, and can adapt communication style to the audience.
• Training: Can identify learning gaps within a team, propose training solutions, and take action to implement them without explicit instructions.
• Initiative: Can identify opportunities for improvement, propose solutions, and take action without explicit instructions.
• Detail-Oriented: Can identify errors or inconsistencies in work and make necessary corrections.
• Organization: Can prioritize daily tasks, manage personal workflow, and utilize basic tools to keep track of responsibilities.
• Follow-Up: Can independently track and follow up on tasks without requiring reminders, ensuring responsibilities are fulfilled.

Skill Level Requirements

• The ability to understand and implement best practices and measures for system security to protect organizational data and infrastructure - Basic
• Proficiency in configuring and managing Windows Server and Linux operating systems
• Ability to create clear and effective technical documentation - Basic
• Ability to simplify and effectively communicate complex problems to stakeholders across various functions and levels - Basic
• Experience in managing and maintaining computer systems and networks to ensure optimal performance and security - Basic
• Experience in understanding, managing, and correlating log data for effective security monitoring and analysis - Basic

External Qualifications:

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field.
• Knowledge of cybersecurity principles, security frameworks, and industry standards.
• Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or equivalent are a plus.

Internal Qualifications:

• Strong analytical and problem-solving skills with attention to detail.
• Ability to work in a fast-paced and dynamic environment, handling multiple tasks simultaneously.
• Strong communication skills, both verbal and written.
• Team player with the ability to collaborate effectively with cross-functional teams.

Other Requirements

• Familiarity with security technologies, including SIEM, IDS/IPS, firewalls, identity, and endpoint protection solutions.
• Proficiency in identifying and analyzing common attack techniques, including phishing, social engineering, credential theft, malware, unauthorized access, persistence, and data exfiltration.
• Experience with security incident management and response processes, including the ability to write clear incident and investigation reports.
• Basic understanding of networking protocols and security concepts.
• Knowledge of common operating systems (Windows, Linux, etc.).
• Available to work flexible hours, including overnights, weekends, and on-call support.

Preferred:

• Experience with security orchestration, automation, and response (SOAR) platforms.
• Proficient in log analysis and use of security log management tools.
• Familiarity with cloud security concepts and technologies (AWS, Azure, etc.).
• Exposure to threat intelligence analysis and threat hunting methodologies.
• Knowledge of identity and access management (IAM) principles and technologies.
• Experience with scripting languages (Python, PowerShell, etc.).
• Understanding of web application security and secure coding practices.
• Knowledge of regulatory compliance frameworks (e.g., CIS, PCI DSS).
• Understanding of penetration testing and vulnerability assessment techniques.