Security Analyst cum Technical Administrator

XenonStack Moments; Anupgarh; On-site; INR 600,000 - 1,200,000; Full time

Job summary

XenonStack Private Limited is seeking a Security Analyst cum Technical Administrator to safeguard and keep XenonStack’s servers, users, endpoints, networks and cloud accounts running securely. You will detect security issues, perform audits, and ensure robust incident response and documentation.

The role combines security operations with hands-on IT administration across Windows/Linux, AD/Entra ID, M365, and cloud environments, in a demanding, regulated context.

Qualifications

• 2–3 years of hands-on security operations and/or system administration.
• Experience with cloud IAM, logging and security groups.

Responsibilities

• Monitor and triage security alerts from SIEM, cloud-native tools and endpoint protection.
• Investigate incidents, document timelines and root causes, remediate within SLA.
• Run vulnerability scans across servers, containers and cloud accounts and track remediation.
• Review cloud security posture on AWS/Azure and raise remediation tickets.
• Conduct access reviews and enforce least privilege; maintain audit-ready evidence.
• Prepare audit evidence for ISO 27001 / SOC 2 and respond to queries.
• Maintain runbooks and security reports; suggest automation for repetitive checks.
• Administer Windows and Linux servers (hardening, patching, monitoring).
• Manage Active Directory/Entra ID and M365; onboarding/offboarding with least privilege.

Skills

Security operations

System administration

Incident handling

Vulnerability scanning

Cloud security basics

Windows Server admin

Active Directory/Entra ID

Networking fundamentals

ISO 27001 / SOC 2 knowledge

Education

BE/B.Tech/MCA/B.Sc IT/CS or equivalent

Tools

SIEM (Splunk/ELK)

Microsoft Sentinel

Qualys/Nessus/OpenVAS

MDM/Intune

Job description

SECURITY ANALYST CUM TECHNICAL ADMINISTRATOR

Location: XenonStack office, Sector 75, STPI, Mohali (Chandigarh Tricity), on-site

Experience: 2–3 years | Joining: Within 30 days (immediate preferred) | Employment: Full time, XenonStack Private Limited

About Xenonstack

XenonStack is a Data and AI Foundry for Agentic Systems, enabling enterprises to design, deploy, operate, and scale intelligent agents across digital and physical environments. We build enterprise-grade platforms across the agentic stack:

• Akira AI – Reasoning and agent orchestration.
• ElixirData – Agentic analytics intelligence. Explainable, decision-centric analytics for measurable business outcomes.
• NexaStack – Agentic infrastructure automation. Secure, compliant AI deployment across cloud, edge, and on-prem.
• MetaSecure – Trust, compliance and defense. Continuous assurance with AI-BOMs, risk scoring, and agentic security.

Our mission is to accelerate the world's transition to AI + Human Intelligence by making agentic systems reliable, responsible, and enterprise-ready.

About The Team

The Security Analyst cum Technical Administrator sits in our Evaluation and Compliance team, working with XenonStack's CISO office and IT operations. The team protects and runs XenonStack's own systems and AI platforms, and the cloud environments we run for enterprise clients in regulated industries such as BFSI and healthcare. This is a dual role: you keep our systems secure and you keep them running.

ROLE MISSION

Keep XenonStack's servers, users, endpoints, network and cloud accounts running, secure and audit-ready: administer them day to day, detect and close security issues quickly, and keep audit evidence complete at all times.

Key Responsibilities

Security operations

• Monitor and triage security alerts from SIEM, cloud-native tools and endpoint protection; separate real incidents from noise.
• Investigate and elevate incidents within SLA; document timelines, root cause and remediation.
• Run vulnerability scans across servers, containers and cloud accounts; track findings to closure with the owning teams.
• Review cloud security posture on AWS and Azure (IAM, logging, encryption, exposed resources) and raise remediation tickets.
• Carry out access reviews and flag excessive, dormant or unexplained privileged access.
• Analyse phishing reports and suspicious emails, and support user security awareness.
• Prepare and maintain audit evidence for ISO 27001, SOC 2 and client security assessments; respond to audit queries.
• Maintain runbooks, playbooks and security reports; suggest automation for repetitive checks.

Technical administration

• Administer Windows and Linux servers: setup, hardening, patching, monitoring and performance checks.
• Manage Active Directory / Microsoft Entra ID and Microsoft 365 (users, groups, licences, MFA, conditional access, mailbox and Teams settings) and Google Workspace where used.
• Run user lifecycle end to end: onboarding, role changes and same-day offboarding, with access granted on least privilege and recorded in tickets.
• Manage endpoints: laptop provisioning, MDM/Intune, antivirus/EDR coverage, disk encryption and OS updates.
• Look after office and cloud networking: LAN/Wi‑Fi, firewall rules, VPN, DNS/DHCP, and AWS/Azure IAM, VPC and security groups.
• Own backups and recovery: schedules, retention, offsite copies and regular restore tests.
• Handle L2 IT support tickets and escalations, maintain the IT asset and licence register, and work with vendors and ISPs.

REPORTING

Reports to the Evaluation and Compliance lead and works closely with XenonStack's CISO, DevOps and platform engineering teams.

How We Work With Ai

AI is part of the daily workflow at XenonStack, not an add‑on.

• At our Mohali/Chandigarh office, AI tools are open for use: scripting, log and alert analysis, investigation notes, report and policy drafting, audit evidence preparation and documentation.
• When working on a client's environment, you follow the client's compliance and information security policy: use only client‑approved tools, and never put client data, logs, credentials or configurations into any tool the client has not approved.
• Every AI‑assisted output is verified by you before it is relied on or shared.
• Come ready to talk about what is in your AI stack, how you verify its output, and how you keep it compliant.

What Success Looks Like

• Security alerts triaged and escalated within the agreed SLA.
• Systems available, patched on schedule and backed up, with restore tests passed.
• Joiners productive on day one and leavers' access removed the same day.
• No critical or high vulnerability left open past its remediation date without an approved exception.
• Access reviews completed on schedule, with no unexplained privileged access.
• Audit evidence ready on request, complete and traceable.

Must-have Skills

• 2–3 years of hands‑on experience in security operations and/or system administration
• SIEM alert triage and log analysis (Splunk, ELK, Microsoft Sentinel or similar)
• Incident handling and escalation, with clear written documentation
• Vulnerability scanning and tracking (Nessus, Qualys, OpenVAS or similar)
• Cloud security basics on AWS or Azure: IAM, CloudTrail/activity logs, GuardDuty/Defender, security groups
• Hands‑on Windows Server and Linux administration, including system and security logs
• Active Directory / Entra ID and Microsoft 365 administration
• Networking fundamentals: TCP/IP, DNS, DHCP, VLANs, VPN and firewall rules
• Backup and restore tools, and endpoint management (Intune or similar)
• Working knowledge of ISO 27001 and SOC 2 controls

Good‑to‑have Skills

• EDR/XDR tools (CrowdStrike, Microsoft Defender, SentinelOne)
• Scripting in PowerShell, Python or Bash for admin and security automation
• Virtualisation and containers (VMware, Hyper‑V, Docker)
• Email security and phishing analysis
• Knowledge of the DPDP Act, GDPR, PCI‑DSS or RBI cyber security guidelines
• Certifications such as CompTIA Security+, CySA+, CEH, Microsoft SC‑200, AZ‑104, MD‑102, RHCSA or AWS Security Specialty

CANDIDATE PROFILE

• B.E./B.Tech/MCA/B.Sc (IT/CS) or equivalent
• 2–3 years across system administration and security operations, in an IT services, SOC, managed services or enterprise IT team, preferably in a regulated industry
• Calm under pressure, comfortable switching between hands‑on admin work and security analysis, thorough in documentation, and clear with users, engineers and auditors

HIRING PROCESS

Pre‑screening assessment (about 10 minutes, at application) → Technical interview → Face‑to‑face technical assessment at our Mohali office → HR and Leadership round → Background verification → Offer.

TERMS

• Location: on‑site at our Mohali (Chandigarh Tricity) office.
• Joining within 30 days; immediate joiners preferred.
• Background verification (BGV) is mandatory.
• Support model: business hours at the office, with rotational on‑call for critical security and system incidents.
• Compensation as per company policy and budget band.

How We Work

We value deep work, clarity, and execution over activity. You will be expected to clarify, plan, execute, and elevate with options, not wait to be told. Ownership sits with the individual, and outcomes are measured, not effort.

OUR VALUES

Agency – Be self‑directed and proactive | Taste – Sweat the details and build with precision | Ownership – Take responsibility for outcomes | Mastery – Commit to continuous learning and growth | Impatience – Move fast and challenge inertia | Customer Obsession – Always put the customer first

WHY JOIN US

• Run and protect enterprise AI platforms and regulated client environments from day one, building both admin and security depth.
• AI‑first environment: work alongside the agentic platforms we build, including MetaSecure.
• Great Place to Work‑Certified, 14+ years, headquartered in Mohali.