Senior Cybersecurity Analyst (Noida, India)

ThreatModeler Inc.; India; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

ThreatModeler is seeking a senior cybersecurity analyst with strong compliance experience to help mature our security stack and compliance program across corporate and product environments.

The role combines hands-on security operations—endpoint security, vulnerability management, incident response, cloud security, and security tooling—with governance, risk, and compliance responsibilities, including evidence gathering, policy reviews, risk management, and audit readiness.

Qualifications

• Senior cybersecurity analyst with strong compliance experience.
• Experience in governance, risk and compliance.
• Hands-on security operations and audit readiness.

Responsibilities

• Operate and improve security tooling across endpoint security, SIEM/SOAR, SASE/SWG/DLP/ZTNA, IAM, vulnerability management, and AWS-native controls.
• Manage vulnerability management across corporate and product environments.
• Support monitoring and incident response activities, including alert review and root cause analysis.
• Review and improve AWS security controls, logging and monitoring, access management, and secure configurations.
• Identify security gaps and propose risk-based improvements.
• Maintain and improve security policies, procedures, and documentation.
• Support ISMS operations including ISO 27001 and SOC 2 readiness.
• Assist with risk assessments, control reviews, evidence collection, and audits.
• Respond to customer security questionnaires and reviews.
• Collaborate with engineering and IT to ensure security/compliance requirements are implemented.

Skills

Endpoint security

Vulnerability management

Incident response

Cloud security

SIEM/SOAR

Identity access

Risk management

Audit readiness

ISMS

ISO 27001

SOC 2

Tools

AWS

Job description

About the company

ThreatModeler Software Inc. is industry’s #1 automated Threat modeling platform. The successful team members will initially support our services clients, where ThreatModeler was awarded a single or multi-year competitive contract. The effort is to perform client implementations, ranging from gathering client requirements for Threat modeling services and rolling out ThreatModeler’s platform across the enterprise.

Reports to: Information Security Officer

Team: IT & Security

Location: India - Noida

Role: Full time - Permanent

Purpose of the Role

We are looking for a senior cybersecurity analyst with strong compliance experience to help manage and mature our security stack and compliance program across both corporate and product environments.

This is a senior and hands-on role suited to someone who can operate independently, make sound risk-based decisions, and own outcomes across security operations and tooling, governance, risk and compliance, and customer security requirements.

The role sits at the intersection of cybersecurity and compliance. The ideal candidate should be comfortable moving between hands-on security operations, including endpoint security, vulnerability management, incident response, cloud security, security tooling, logging and monitoring, etc., and compliance work, such as evidence gathering, policy and procedure review, risk management, and audit readiness.

Responsabilities

• Operate and improve the company’s security tooling across endpoint security, SIEM/SOAR, SASE/SWG/DLP/ZTNA, identity and access management, vulnerability management, and AWS-native security controls.
• Manage vulnerability management across both corporate and product environments.
• Support monitoring and incident response activities, including alert review, investigations, and root cause analysis.
• Review and improve AWS security controls, logging & monitoring, access management, secure configuration practices, etc.
• Identify technical security gaps and propose practical, risk-based improvements.
• Maintain and improve security policies, procedures, standards, and operational documentation.
• Support the operation and improvement of the ISMS, including ISO 27001 and SOC 2 readiness.
• Assist with risk assessments, treatment plans, control reviews, evidence collection, audit preparation, and remediation tracking.
• Respond to customer security questionnaires and support customer security reviews where needed.
• Work closely with engineering, infrastructure, IT, and product teams to ensure security and compliance requirements are implemented effectively.

What We Offer

• Competitive salary and performance-based bonuses.
• Opportunities for career growth and professional development.
• A collaborative and innovative work environment.