Security Analyst

Morningstar; Mumbai City; Hybrid; INR 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Hybrid work model

Flexible work hours

Equal opportunity employer

Job summary

Morningstar is seeking a Security Analyst for its Security Operations Center in Mumbai. The role focuses on monitoring, analyzing threats, and providing incident response to protect Morningstar’s infrastructure and data.

You will work with cloud security, endpoint protection, and threat intelligence to detect and mitigate attacks, while coordinating with teams to restore operations and minimize impact.

Qualifications

• Bachelor’s degree in Information Security or related field.
• 2–3+ years in Information Security.
• Experience with security tools and cloud security (AWS).
• Good communication and ability to interpret security fundamentals.

Responsibilities

• Provide 24x7 monitoring for security alerts.
• Detect, analyze, report and respond to cyber security events and incidents.
• Triage, review and escalate alerts.
• Develop and operationalize new adversary detection methods.
• Assess security impact of alerts and anomalies.
• Generate reports for technical and non-technical stakeholders.

Skills

Security monitoring

Threat analysis

Incident response

Cloud security

Endpoint security

Education

Bachelor’s degree in Information Security/Cybersecurity

Tools

Splunk

EDR

AWS

Job description

Job Title : Security Analyst

Job Description:

The Information Security Team is a central function governing corporate and product security globally. We have built a strong team of high performing security experts and looking for passionate analyst to join our Security Operations Center here at Morningstar. As a member of our Security Operations Center Team, you will get to be a part of a growing and well supported program protecting Morningstar’s Infrastructure, Data, and People.

The Role:

As an analyst on our Security Operations Center Team, you will monitor and analyze threats, provide security monitoring, and incident response services. Day to day you will work with the team to understand, mitigate, and respond to threats quickly, restoring operations and limiting impact. You will analyze incidents to determine scope and impact and assist in recovery efforts. You will combine threat intelligence, event data, and assessments from recent events, to identify patterns to understand attackers’ goals and stop them from succeeding. This position is based in our Mumbai office.

Responsibilities:

• Provide 24x7 monitoring operations for security alerts
• Detect, analyze, report and respond to cyber security events and incidents using a combination of technology solutions and processes
• Triage , review and elevate alerts
• Examine and operationalize new adversary detection methods to defend Morningstar
• Assess the security impact of security alerts and traffic anomalies to identify malicious actions.
• Generate reports for both technical and non-technical staff and stakeholders.

Requirements

• A bachelor’s degree and 2-3+ years’ experience in Information Security.
• Excellent communication skills and an understanding of cyber security fundamentals.
• Candidates should be interested in keeping up with the latest security trends.
• Experience with security tools
• Good with cloud security concept especially AWS
• Ability to work on endpoint security alerts
• Understanding of application security
• Add-on Certification like CEH, Security+, CompTIA+, Splunk, EDR

Morningstar is an equal opportunity employer

Morningstar’s hybrid work environment gives you the opportunity to collaborate in-person each week as we’ve found that we’re at our best when we’re purposely together on a regular basis. In most of our locations, our hybrid work model is four days in-office each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you’ll have tools and resources to engage meaningfully with your global colleagues.

I10_MstarIndiaPvtLtd Morningstar India Private Ltd. (Delhi) Legal Entity