Senior Cyber Security Analyst (SOC / Incident Response)

ZettaMine Labs Pvt. Ltd.; Hyderabad; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

ZettaMine Labs Pvt. Ltd. in PAN India is seeking a Senior Cyber Security Analyst (SOC/Incident Response) to monitor, triage, investigate, and respond to threats across all assets.

You will perform log analysis, develop detection use cases, and collaborate with teams to drive data-driven security improvements. The role requires 6–8 years of experience, strong EDR/EDR tooling knowledge, and cloud security exposure.

Qualifications

• Minimum 3+ years working in security practices, CSIRT/SOC experience preferred.
• Demonstrable incident response lifecycle experience at technical and procedural levels.
• Experience handling incident response across different operating systems.
• Ability to use scripting/automation to solve problems.
• Strong IT fundamentals across networking, systems, and applications.
• Cloud infrastructure experience and incident response in cloud environments.
• Ability to prioritize escalations with clear communication.
• Excellent interpersonal and communication skills for collaboration.

Responsibilities

• Monitor, triage, investigate, and respond to suspicious activity across company assets.
• Perform log analysis and analyze datasets to support alerts and responses.
• Provide data-driven insights to improve cybersecurity operations.
• Create and maintain detection use cases and implement improvements.
• Interface with other teams as required and conduct root cause analyses.
• Use manual and automated tools to proactively analyze data.
• Assist stakeholders in determining remediation actions.
• Communicate cybersecurity trends to team members and leadership.
• Contribute to ongoing improvements of detection and response capabilities.
• Be part of on-call rota for out-of-hours escalations.

Skills

Incident response

CSIRT/SOC experience

Log analysis

Scripting/automation

Cloud security

EDR knowledge

EDR tools

Strong communication

Tools

Elastic Security

Tines

CrowdStrike

Job description

Job Title: Senior Cyber Security Analyst (SOC / Incident Response)

Location: PAN India

Experience: 6-8 Years

Notice Period: Immediate Joiners

Job Description

Tools Stack

• SIEM Tool: Elastic Security
• Automation Platform: Tines (exposure to any automation platform is fine)
• EDR: CrowdStrike

JD as Below

What You'll Do

• Monitor, triage, investigate, and respond to suspicious activity across all company assets.
• Perform log analysis and analyse datasets to support alert and response activities.
• Provide data-driven insights to improve cybersecurity operations.
• Create and maintain detection use cases and implement improvements.
• Interface with other teams as required.
• Perform root cause analysis of security issues.
• Use a combination of manual and automated tools to proactively analyse various data.
• Help stakeholders determine the best course of action to remedy the problem.
• Work effectively with team members and leadership by communicating cybersecurity trends and sharing ideas and knowledge in a constructive and positive manner.
• Actively participate in our goal to continuously improve the way we work; identify improvement areas in our technology, processes, and techniques to enhance our detection and response capabilities.
• Ensure the ongoing core objectives of the CSIRT are accomplished and measurable.
• Be a part of our Security on-call rota.

What You’ll Need

• Minimum 3+ years working in security practices (CSIRT/SOC experience preferred).
• Demonstrable experience of the incident response lifecycle at both technical and procedural levels.
• Demonstrable experience performing incident response across different operating systems.
• Ability to quickly solve problems using scripting and automation.
• Strong understanding of IT fundamentals across networking, system, and application layers.
• Strong understanding of Cloud infrastructure and experience of incident response in cloud environments.
• Proven ability to prioritize incoming escalations and requests appropriately using clear communications.
• Excellent interpersonal and communication skills in order to share knowledge with peers and communicate effectively with different stakeholders.
• Strong knowledge of Endpoint Detection and Response (EDR) tools for incident analysis.
• Expert knowledge of Security Incident & Event Monitoring (SIEM) tools for incident analysis.
• Willingness to be part of an on-call rota for out-of-hours escalations.

What’s Nice to Have

• 5+ years working in an enterprise-level organization with responsibilities related to computer security or system administration.
• Experience in the automation and orchestration of security playbooks (SOAR).
• Strong written and verbal communication skills.
• Experience working with distributed teams.