Security Operations Analyst

ThoughtSpot; Bengaluru; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

ThoughtSpot is seeking a Security Operations Engineer to be a hands-on representative of the information security team. You will assist with security incident management, vulnerability remediation, and automation of processes.

The role requires strong incident response expertise and the ability to provide actionable reporting to stakeholders. You will monitor alerts from SIEM/EDR, collaborate with cross-functional teams, and develop playbooks and metrics to improve security operations.

Qualifications

• 3+ years in Security Operations Center (SOC) environments.
• Experience monitoring and triaging alerts from SIEM/EDR/cloud.
• Ability to investigate and correlate events across data sources.
• Hands-on deployment and operation of enterprise security solutions.
• Familiarity with threat intel, vulnerability management, and incident handling.
• Proficiency in scripting or development to automate workflows.
• Knowledge of AI tools for security operations and prompt engineering.

Responsibilities

• Respond to security alerts to support issue resolution and minimize impact.
• Research security issues and track resolutions with internal teams.
• Assist with vulnerability identification and remediation.
• Help manage and improve the issue-tracking process.
• Collaborate with remediation teams for process improvements.
• Ensure security tickets are organized and tracked.
• Assist with incident response playbooks creation and upkeep.
• Create and enhance security metrics for program effectiveness.
• Automate existing security processes as appropriate.

Skills

SOC experience

Security monitoring

Incident response

Threat intelligence

Vulnerability management

Automation scripting

Python development

AI tool adoption

Communication skills

Education

Computer Science/Cyber Security background

Tools

EDR

SIEM

DLP

Cloud security tools

Email security

Job description

The Security Operations Engineer position at ThoughtSpot will be a hands-on representative of the information security team and will assist with security incident management and vulnerability remediation. This is a technical role that requires a solid understanding of information security, incident response, and vulnerability management. This role will enhance our automation of vulnerability management, analyze results, and provide relevant reporting to stakeholders. This position requires organizational skills, analytic skills, quick reaction, attention to detail, and technical expertise to protect the company’s assets.

What You'll Do:

• Respond to security alerts to support issue resolution and minimize the impact of security events
• Research security issues and work with internal teams to find and track resolution.
• Assist with vulnerability identification and remediation
• Help manage and improve the issue-tracking process
• Collaborate with remediation teams for process improvement opportunities
• Ensure security tickets are properly organized and tracked
• Assist with the creation and maintenance of incident response playbooks
• Create and enhance operational metrics to ensure the security programs are effective
• Automate existing processes as appropriate

What You Bring:

• Security Operations & Analysis: 3+ years of hands‑on experience in Security Operations Center (SOC) environments, with expertise in security monitoring, incident detection & response, threat intelligence, and vulnerability management. Proven ability to monitor and triage security alerts from SIEM, EDR, cloud, and other security technologies; investigate suspicious activities; and correlate events across multiple data sources.
• Enterprise Infrastructure & Security: Hands‑on proficiency in deploying and operating enterprise‑scale security solutions across cloud and on‑premises environments, with a strong understanding of security principles, network architecture, and modern development practices. Experience integrating and analyzing multi-source telemetry across endpoint, identity, cloud, and DLP platforms to provide comprehensive security visibility.
• Automation & Development: Scripting or software development expertise (e.g., Python) to automate security workflows of routine tasks and Improve SOC workflow.
• AI Tools & Agent Workflows: Practical experience adopting AI technologies, including LLM‑based assistants, copilots, and autonomous agents, to improve security operations and investigation workflows. Experience with prompt engineering, tool orchestration, and MCP/API integrations to automate analysis and enhance SOC efficiency.
• Process Adherence: Ensure all security incidents are detected, investigated, and escalated within defined SLAs and SOC procedures.Maintain timely and accurate incident documentation and ensure prompt escalation of critical incidents.
• Problem Solving & Threat Mindset: Demonstrate strong analytical capabilities to investigate complex security incidents, adopt an offensive security mindset, and apply structured problem‑solving methodologies to identify root causes and drive effective resolutions
• Collaboration & Communication: Self‑motivated, detail‑oriented team player capable of working independently or in distributed teams, with excellent communication skills to tailor technical insights for diverse stakeholders.
• Relevant certifications such as CEH, GCIH, CompTIA Security+, AWS, GCP or equivalent credentials.
• Academic Background in Computer Science, Cyber Security or related field
• Familiarity with various security management tools (Eg: EDR, SIEM, DLP, Email Security, Threat & Vulnerability Management)