Security Operations Analyst

Comscore Technologies; Pune District; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Comscore Technologies in Pune, India is seeking a Security Operations Analyst to monitor security tools, respond to incidents, and perform vulnerability assessments.

The role covers risk management, third-party evaluations, and developing playbooks, with on-call duties and US/IST hours. Candidates should have cybersecurity knowledge and scripting skills.

Qualifications

• Bachelor's degree in cybersecurity or related field, or working toward one.
• Knowledge of information security principles, risk assessment, threat modeling, and incident response.
• Familiarity with MITRE ATT&CK, ISO 27001, OWASP Top Ten and similar security frameworks.
• Understanding of network architectures and protocols.
• Experience with Linux, Windows, and AWS infrastructure.
• Scripting skills in Python, PowerShell, and Linux shell.
• Experience with security tooling listed above or similar.
• Industry certifications such as CISSP, CompTIA/Security+/Linux+, CISA.
• Strong written and verbal communication.
• Analytical and problem-solving abilities.
• Collaborative mindset and customer-focused attitude.
• Ability to work with minimal supervision and on-call shifts.
• Willingness to work US/IST hours for global alignment.

Responsibilities

• Monitor and administer a suite of security tools (WAF, EDR, IDS/IPS, etc.).
• Contain, remediate, and document security incidents.
• Perform threat and vulnerability assessments and maintain metrics.
• Lead or participate in third-party risk management security evaluations.
• Lead or participate in security risk assessments and audits.
• Develop and maintain standard operating procedures for playbooks and tools.
• Recommend and apply system and network hardening best practices.
• Evaluate and recommend new security software to address threats.

Skills

Security fundamentals

Threat modeling

Vulnerability management

Incident response

Identity & access management

Communication skills

Analytical thinking

On-call readiness

Education

Bachelor's degree in cybersecurity

Tools

WAF

Endpoint Protection

EDR

IDS/IPS

Identity Protection

Brand Protection

Cloud Security Posture Management

Attack Surface Management

AI Governance

Pentest

Job description

Job Title: Security Operations Analyst

Location: Pune, India

About This Role:

The Security Operations Analyst is a key member of the information security team who ensures:

• Security tools operate effectively.
• Incidents are promptly detected, investigated, contained, and remediated.
• Vulnerabilities are promptly identified and remediated.

What you'll do:

• Monitor and administer a suite of best-of-breed security tools:
• Web Application Firewall (WAF) and Denial of Service Protection
• Endpoint Protection
• Endpoint Detection Response (EDR)
• Firewall and Network Intrusion Detection/Prevention (IDS/IPS)
• Identity Protection
• Brand Protection
• Cloud Security Posture Management
• Identity Protection
• Attack Surface Management
• AI Governance
• Pentesting
• Contain, remediate, and document reported security incidents.
• Perform threat and vulnerability assessments, maintain vulnerability metrics, and implement remedial actions required, including annual pentests.
• Contribute to Third Party Risk Management security and compliance evaluations of new and existing partners.
• Lead or participate in application and infrastructure security risk assessments and audits.
• Develop and maintain standard operating procedures for security playbooks and tools.
• Recommend and apply system and network hardening best practices.
• Evaluate and recommend new security software and technologies to address new threats.

What you'll need:

• Bachelor's degree or working toward a degree focused on cybersecurity or related experience.
• Knowledge of information security principles, security risk assessment, threat modeling, vulnerability management, incident response, and identity and access management.
• Knowledge of MITRE ATTACK, ISO 27001, OWASP Top Ten, and other security frameworks.
• Knowledge of network architecture concepts and protocols.
• Knowledge of Linux, Windows, and AWS infrastructure.
• Knowledge of scripting technologies (Python, Power Shell, Linux Shell).
• Experience with security tooling noted above or similar.
• Industry Certifications (e.g. CISSP, CompTIA/Security+/Linux+, CISA)
• Strong written and verbal communication skills.
• Strong analytical and problem-solving skills.
• Continuous improvement mindset.
• Collaborative work style.
• Strong customer/client focus, with the ability to manage expectations appropriately, provide a superior customer/client experience and build long-term relationships.
• Ability to work well under minimal supervision and be reliable.
• Ability to hold an incident response on-call shift to support Comscores 24x7 SOC which may include occasional weekend or after-hours coverage, when needed.
• Ability to work under stress and handle multiple high-pressure situations simultaneously.
• Ability to be available and contribute to work meetings during US hours (Pacific and Eastern Time mornings).

Shift Timing:

The regular hours for this position will cover a combination of business hours in the US and India typically 2PM-11PM IST. Occasionally, later hours may be required for meetings with teams in other parts of the world. Additionally, for the first 4-6 weeks of onboarding and training, US Eastern time hours (IST -9:30) may be required.