Security Analyst - Technical

JobItUs; Mumbai; On-site; INR 1,000,000 - 1,600,000; Full time

Job summary

JobItUs in Mumbai (Churchgate) seeks a Security Analyst - Technical to be the core technical expert for assurance activities and compliance across the organization. You will work on information security posture, data protection, and governance for customers, partners, and employees.

Responsibilities include risk assessment, vulnerability management, incident handling, policy reviews, and coordinating with the ISG team to ensure regulatory compliance and effective security operations.

Qualifications

• Diploma / Degree in a technology-related field is required.
• Professional security analyst certification is required.
• 5–7 years of hands-on VA-PT, configuration reviews and data protection experience.

Responsibilities

• Technical documentation about security breaches and processes.
• Configuration reviews for implemented security solutions (firewalls, WAF, PAM/PIM, DLP, SIEM).
• Data encryption programs to safeguard vital data.
• Red teaming, VA-PT, source code reviews, mobile app reviews.
• Coordinate with ISG team and stakeholders.
• Conduct risk assessments and risk management activities.
• Ensure policies and standards are applied across projects and services.
• Review and propose changes to policies for efficiency and compliance.
• Coordinate, measure and report on technical security posture.
• Manage outsourced information security vendors and SLAs.
• Oversee incident management activities including detection, response and reporting.
• Maintain a security knowledgebase with advisories, alerts, trends and regulations.
• Manage threat and vulnerability management, determine residual risk and treatment.
• Mitigate regulatory compliance requirements as per guidelines.
• Ensure audit trails and logs are reviewed per policies and requirements.
• Design, coordinate and oversee security testing and remediation.

Skills

VA-PT

ISO/IEC 27001 knowledge

NIST knowledge

Communication skills

Cloud computing

Education

Diploma / Degree in technology-related field

Tools

Firewalls

WAF

PAM/PIM

DLP

SIEM

Job description

Role: Security Analyst - Technical

Location: Churchgate, Mumbai (Head Office)

The Security Analyst serves as the core technical expert of all assurance activities related to the information security posture, compliance mitigation, integrity and confidentiality of customer, business partner, employee and business information in compliance with the organization's information security policies.

Responsibilities

• Technical documentation about the security breaches and the processes.
• Configuration reviews for implemented solutions like - firewalls, WAF, PAM/PIM, DLP, SIEM Etc...
• Data encryption programs to safeguard organization's vital data.
• Red teaming, VA-PT, source code reviews, Mobile app reviews
• Work directly with the ISG team and coordination with stakeholders
• Risk assessment and risk management processes
• Understand the processes and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services
• Review and Propose changes to existing policies and procedures to ensure operating efficiency and regulatory compliance.
• Coordinate, measure and report on the technical aspects of security posture.
• Manage outsourced vendors that provide information security functions for compliance with contracted service-level agreements.
• Manage and coordinate operational components of incident management, including detection, response, documentation and reporting.
• Maintain a knowledgebase comprising a technical reference library, security advisories and alerts, information on security trends and practices, and laws and regulations.
• Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk.
• Mitigate the compliance requirements as per regulatory guidelines
• Ensure audit trails, system logs and other monitoring data sources are reviewed periodically and follow policies and audit requirements.
• Design, coordinate and oversee security testing procedures to verify the security of systems, networks and applications, and manage the remediation of identified risks.

Requirements

• Diploma /Degree in a technology-related field required.
• Professional security analyst certification
• Minimum of five to 7 years of hands on experience in VA-PT, configuration reviews and data protection
• Knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST.
• Excellent written and verbal communication skills and high level of personal integrity.
• Experience with Cloud computing/Elastic computing across virtualized environments.