Senior Information Security Analyst

Arrow Electronics India Pvt Ltd; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Arrow Electronics India Pvt Ltd is seeking an Information Security Analyst III to join the global Cyber Operations team in Bengaluru. The role emphasizes monitoring, detection, and response across 24x7 shifts, with opportunities to progress toward SOC Lead and Architect roles.

The ideal candidate brings strong SOC operations experience, proficiency in KQL, Microsoft Sentinel, Defender, and DLP tools, and relevant certifications.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• 5–10 years of SOC analysis experience with lead responsibilities.
• Strong knowledge of KQL for security data queries.
• Hands-on experience with Microsoft Sentinel and Defender.
• Certs such as CISSP/CEH are a plus.

Responsibilities

• Monitor, detect, and respond to security alerts using SIEM/SOAR.
• Develop automated detection rules and runbooks in Sentinel.
• Lead incident response and coordinate with escalation teams.
• Participate in threat hunting, data forensics, and SOC procedures.
• Support 24x7 shift operations.

Skills

KQL

Microsoft Sentinel

Microsoft Defender

Purview DLP

Threat intelligence

Incident response

SOC operations

Threat hunting

Data forensics

Playbooks

Education

Bachelor’s degree in Computer Science or Cybersecurity

Tools

Microsoft Sentinel

KQL

Microsoft Defender

MS Purview DLP

Job description

Information Security Analyst III Position: Information Security Analyst III Job Description: We are seeking a highly skilled SOC Level 2/3 Analyst to join our global Cyber Operations team. This role is essential for maintaining our organization’s security posture through continuous monitoring, detection, and response. The SOC Analyst III will operate on a rotating 24x7 shift schedule, including night shifts. Ideal candidates will have a strong background in SOC operations, incident response, and expertise in various cybersecurity tools and technologies.

What you will be doing:

• Threat Detection and Incident Response: Monitor, analyze, and respond to global security alerts using SIEM/SOAR tools. Triage with sandboxing technologies Analyze with threat intelligence tools Investigate and respond to security events, implementing containment and recovery strategies. Expedite with AI/ML workflows and capabilities Utilize KQL for querying and correlating data to identify and address threats. Develop and manage automated detection rules and playbooks in Microsoft Sentinel. Employ Microsoft Defender and MS Purview Data Loss Prevention (DLP) tools to enhance endpoint protection and data security.
• Threat Hunting and Data Forensics: Conduct proactive threat hunting and data forensics to uncover potential threats. Utilize advanced threat intelligence platforms to inform and refine threat detection strategies. Develop and execute SOC playbooks to improve response and operational efficiency.
• Team Collaboration and Leadership: Triage and assist on complex incidents and investigations. Collaborate with USA Security escalation teams and departments to enhance overall security posture. Assist in developing and refining SOC procedures and best practices.
• Career Development: Opportunities for progression to SOC Lead and Architect roles. Access to continuous learning, certifications, and professional development resources. Regular performance reviews to discuss career growth and advancement.

What we are looking for : Qualifications:

• Preferred Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• 5-10 years of experience as a SOC analyst, preferably with lead responsibilities.
• Strong knowledge of KQL (Kusto Query Language) for querying and analyzing security data.
• Hands-on experience with Microsoft Sentinel, including rule creation, playbook implementation, and workbooks.
• Proficiency in Microsoft Defender and MS Purview Data Loss Prevention (DLP).
• Certifications such as CISSP, CEH, or CompTIA Security+ are a plus.

Core Technologies and Expertise Required:

• Microsoft Sentinel: Experience with SIEM, rule creation, playbooks, and workbooks.
• KQL (Kusto Query Language): Proficiency in querying and data correlation.
• Microsoft Defender: Expertise in endpoint protection and threat detection.
• MS Purview Data Loss Prevention (DLP): Experience with data protection and loss prevention strategies.
• Incident Response Tools: Knowledge of containment and recovery strategies.
• Vulnerability Management Tools: Experience in assessments, penetration tests, and threat monitoring.
• Threat Intelligence Platforms: Ability to leverage and analyze threat intelligence.
• Network Security: Working knowledge of firewalls, IDS/IPS, and network security protocols.
• Data Forensics: Proficient in data forensic analysis and investigation.
• SOC Playbooks: Proficient in creating and managing SOC playbooks.

Additional Skills:

• Strong understanding of incident response processes and procedures.
• Excellent analytical and problem-solving skills.
• Ability to work within a well-managed team

Shift Coverage: Rotational 24x7 shifts.

Arrow Electronics, Inc. (NYSE: ARW), an award-winning Fortune 148 and one of Fortune Magazine’s Most Admired Companies. Arrow guides innovation forward for over 220,000 leading technology manufacturers and service providers. With 2023 sales of USD $33.11 billion, Arrow develops technology solutions that improve business and daily life. Our broad portfolio that spans the entire technology landscape helps customers create, make and manage forward-thinking products that make the benefits of technology accessible to as many people as possible. Learn more at www.arrow.com . Our strategic direction of guiding innovation forward is expressed as Five Years Out, a way of thinking about the tangible future to bridge the gap between what's possible and the practical technologies to make it happen. Learn more at https://www.fiveyearsout.com/ .

Location: IN-KA-Bangalore, India (SKAV Seethalakshmi) GESC Time Type: Full time Job Category: Information Technology Experience Level Senior Level