Security Analyst (Cyber Defense Analyst)

Jobgether; India; On-site; INR 1,700,000 - 2,400,000; Full time

Benefits offered by this job

Health insurance

Paid time off

Flexible work

Learning & development

Certifications support

Wellness initiatives

Retirement benefits

People-first culture

Modern security tech exposure

Job summary

Jobgether is seeking an experienced Security Analyst (Cyber Defense Analyst) based in India to strengthen enterprise security through hands-on cyber defense, monitoring, investigation, and incident response. You will analyze security events across endpoints, identities, networks, cloud environments, and applications to identify and contain threats.

The role combines security operations with threat hunting, detection improvements, and response automation, using modern SIEM, endpoint protection,

Qualifications

• - 5+ years of information security experience, incident response or security operations in a corporate/enterprise setting.
• - Hands-on with SIEM platforms and investigations; CrowdStrike NG-SIEM preferred.
• - Experience with Microsoft 365 security technologies, Defender XDR.
• - Networking and cloud knowledge (AWS and Azure).
• - Proficiency with Windows and macOS operating systems.
• - Strong written and verbal communication; able to explain technical findings.
• - Familiarity with MITRE ATT&CK, NIST CSF, CIS Controls.
• - Scripting/queries: PowerShell or Python.
• - Vulnerability management tools like Tenable and Wiz.
• - Bachelor’s degree in Cybersecurity/Info Security/CS/IT.
• - Cybersecurity certifications such as CCSP, GCIH, CySA+, GSEC, SSCP.

Responsibilities

• Monitor, triage, and investigate security alerts, telemetry, and log data across enterprise platforms including SIEM.
• Analyze exploits, attacker behavior, anomalies across endpoints, identities, networks, cloud, and apps.
• Correlate security events in SIEM to identify threats and support incident declarations.
• Document investigation findings, evidence, and incident status through lifecycle.
• Conduct proactive threat hunting and research to identify emerging risks.
• Contribute to detection engineering and response automation initiatives.
• Support core security technologies' reliability and visibility.
• Develop and refine incident response playbooks, workflows, and procedures.
• Communicate intrusion activity, incident details, and threats to leadership.
• Collaborate with infrastructure teams to review vulnerability findings and remediation paths.
• Contribute to information security projects and continuous improvement.

Skills

Incident response

Cyber defense

Security operations

SIEM platforms

CrowdStrike NG-SIEM

Microsoft 365 security

AWS

Azure

Windows

macOS

Communication skills

PowerShell scripting

Python scripting

Vulnerability management

Tenable

Wiz

MITRE ATT&CK

NIST CSF

Education

Bachelor's degree in Cybersecurity

Information Security

Computer Science

Information Technology

Tools

CrowdStrike NG-SIEM

Tenable

Wiz

Microsoft Defender XDR

SIEM

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Analyst (Cyber Defense Analyst) based in India. This role offers the opportunity to strengthen enterprise security through hands‑on cyber defense, monitoring, investigation, and incident response. You will analyze security events across endpoints, identities, networks, cloud environments, and applications to identify and contain threats. The position combines security operations with proactive threat hunting, detection improvement, and response automation. You will work with modern SIEM, endpoint, Microsoft 365, vulnerability management, and cloud security technologies. The role provides meaningful exposure to security incidents, emerging threats, attacker behaviors, and enterprise security projects. You will collaborate with infrastructure teams, system owners, leadership, and global stakeholders in a fast‑paced environment. This is an ideal opportunity for an experienced security professional who combines strong analytical skills with clear communication and a proactive defensive mindset.

Accountabilities:

• Monitor, triage, and investigate security alerts, telemetry, and log data across enterprise security platforms, including SIEM and other detection technologies.
• Analyze exploits, attacker behavior, suspicious activity, and anomalies across endpoint, identity, network, cloud, and application data sources.
• Correlate security events within the SIEM to identify potential threats, validate detections, and support incident declaration and escalation decisions.
• Document investigation findings, evidence, response activities, and incident status throughout the incident lifecycle, ensuring clear and timely communication.
• Conduct proactive threat hunting and threat research to identify emerging risks, adversary techniques, and gaps in detection coverage.
• Contribute to detection engineering and response automation initiatives that improve monitoring, investigation, and containment capabilities.
• Support the operation and effectiveness of core security technologies by maintaining their reliability, visibility, and defensive capabilities.
• Help develop and refine incident response processes, playbooks, workflows, and operational procedures.
• Communicate intrusion activity, incident details, threat trends, and recommended actions clearly to leadership and internal stakeholders.
• Partner with infrastructure teams and system owners to review vulnerability findings, prioritize high‑risk remediation, and track issues through closure.
• Contribute to information security projects and continuous improvement initiatives that strengthen the organization's overall security posture.

Requirements:

• 5+ years of professional experience in information security, ideally with direct experience in incident response, cyber defense, or security operations within a corporate or enterprise environment.
• Hands‑on experience with SIEM platforms, including searches, dashboards, alerts, event correlation, and investigations; experience with CrowdStrike NG‑SIEM is strongly preferred.
• Experience with Microsoft 365 security technologies, particularly Microsoft Defender XDR for email, identity, and collaboration environments.
• Working knowledge of networking fundamentals and cloud environments, including AWS and Azure.
• Foundational knowledge of Windows and macOS operating systems.
• Strong written and verbal communication skills, including the ability to document incidents clearly and explain technical findings to non‑technical stakeholders.
• Familiarity with security frameworks such as MITRE ATT&CK, NIST CSF, and CIS Controls is preferred.
• Basic scripting or query‑language knowledge, such as PowerShell or Python, to support security analysis and automation is preferred.
• Experience supporting vulnerability management with tools such as Tenable and Wiz, including triage, validation, prioritization, and remediation tracking, is preferred.
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline.
• A cybersecurity certification such as CCSP, GCIH, CySA+, GSEC, SSCP, or an equivalent credential is required.
• Strong analytical, problem‑solving, follow‑up, and quality‑assurance skills, combined with the ability to remain effective in a fast‑paced environment.
• Collaborative and professional approach, with the ability to work effectively with colleagues and stakeholders at different levels of an organization.

Benefits:

• Comprehensive health insurance for employees, with options to extend coverage to eligible dependents.
• Paid time off and company holidays, plus additional leave benefits according to company policy.
• Flexible work arrangements designed to support work‑life balance.
• Learning and development opportunities, including support for continuous technical growth and upskilling.
• Opportunities to pursue professional certifications and credentials as part of ongoing career development.
• Employee wellness initiatives supporting physical and mental well‑being.
• Retirement and statutory benefits in accordance with applicable Indian regulations.
• An inclusive, collaborative, and people‑first culture that encourages ownership, learning, and diverse perspectives.
• Exposure to modern security technologies and opportunities to contribute to enterprise‑wide cybersecurity initiatives.