Security Operations Analyst

Tata Consultancy Services; Kolkata District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Tata Consultancy Services in Kolkata is seeking a Security Operations Analyst (Cloud & SIEM) with 6-8 years of experience. The role focuses on monitoring, detecting, and responding to cybersecurity threats across cloud environments and SIEM platforms.

Responsibilities include use-case development, alert tuning, IOC management, vulnerability assessment, and security automation, aligned with NIST, MITRE ATT&CK, and CIS Controls. The position offers 24x7 monitoring in a hybrid cloud setting.

Qualifications

• Experience level: 6-8 years in security operations.

Responsibilities

• Monitor, detect, investigate and respond to cybersecurity threats across cloud environments (AWS, Azure, or GCP).
• Utilize SIEMs such as Microsoft Sentinel, Splunk, QRadar, ArcSight, LogRhythm, or Elastic SIEM for monitoring and incident response.
• Develop use cases, tune alerts, manage IOCs, and support vulnerability assessment and security automation.
• Familiarity with frameworks such as NIST, ISO 27001, MITRE ATT&CK, and CIS Controls; collaborate across teams to improve security posture.

Skills

Cloud security

Security incident monitoring

Threat hunting

Log analysis

Scripting (PowerShell, Python, Bash)

MITRE ATT&CK/NIST

Tools

Microsoft Sentinel

Splunk

QRadar

ArcSight

LogRhythm

Elastic SIEM

Job description

Role: Security Operations Analyst (Cloud & SIEM)

Experience: 6-8 Years

Location: Kolkata

Required Skillset:

• Experience with AWS/Azure/GCP security services
• Hands-on experience with any SIEM platform
• Security incident monitoring and response
• Threat hunting and log analysis
• Basic understanding of network, endpoint, and cloud security
• Knowledge of MITRE ATT&CK, NIST, and cybersecurity best practices
• Scripting/automation skills (PowerShell, Python, or Bash) preferred.

Responsibilities:

Security Operations Analyst with experience in monitoring, detecting, investigating, and responding to cybersecurity threats across cloud environments (AWS, Microsoft Azure, or Google Cloud Platform).

Proficient in SIEM technologies such as Microsoft Sentinel, Splunk, QRadar, ArcSight, LogRhythm, or Elastic SIEM for security event monitoring, log analysis, threat hunting, and incident response.

Skilled in cloud security monitoring, use case development, alert tuning, IOC management, vulnerability assessment, and security automation.

Familiar with frameworks and standards such as NIST, ISO 27001, MITRE ATT&CK, and CIS Controls.

Strong analytical and troubleshooting skills with the ability to collaborate across teams to improve security posture and operational resilience.

This role is responsible for 24x7 security monitoring, incident investigation, threat detection, and continuous improvement of security operations across hybrid and cloud environments.