Senior Security Analyst

UltraViolet Cyber; Hyderabad; On-site; INR 800,000 - 1,200,000; Full time

Job summary

UltraViolet Cyber is looking for a skilled Security Analyst in Hyderabad to join their rapidly growing shared services team. The individual will monitor and investigate security incidents, while using cutting-edge security tools to protect critical infrastructure and data.

The ideal candidate should have over 4 years of experience in a relevant operational technology environment and possess strong analytical skills. They must be adept at communicating effectively with clients and have a solid understanding of the cyber security landscape.

Qualifications

• 4+ years of experience in an operational technology environment.
• Foundational knowledge of core networking principles (TCP/IP, DNS, HTTP).
• Experience with security monitoring platforms, preferably a SIEM solution.
• Strong understanding of the cyber security threat landscape.

Responsibilities

• Monitor and analyze security events and alerts in a 24x7 environment.
• Perform initial investigation of alerts to validate security incidents.
• Execute procedures for immediate incident response actions.
• Conduct analysis of security logs and network traffic.
• Create detailed incident reports providing timeline and findings.
• Research emerging threats and update detection capabilities.
• Identify opportunities for automation to improve SOC workflows.

Skills

Analytical skills

Problem-solving

Communication skills

Knowledge of networking principles

Cyber security awareness

Education

Relevant degree in Computer Science or Cyber Security

Tools

SIEM platforms

Vulnerability scanners

EDR tools

Job description

We are seeking an experienced and technically proficient Security Analyst in our rapidly growing and dynamic shared services team. The ideal candidate will effectively manage security incidents by monitoring, investigating, and identifying the root causes, and recommend effective mitigation strategies. This position offers the opportunity to work with cutting‑edge security tools. The role is highly analytical and requires a proactive, detail‑oriented mindset to protect critical infrastructure and data.

Core Responsibilities

• Continuous Monitoring & Alert Triage: Actively monitor and analyze security events, network traffic, and alerts generated by the SIEM (Security Information and Event Management) platform and other security tools in a 24x7 environment.
• Incident Qualification: Perform initial investigation and analysis to determine if an alert is a true positive incident or a false positive; promptly escalating validated security incidents to senior analysts (Tier 2).
• Initial Containment & Response: Execute documented procedures for immediate actions such as network traffic isolation or account disabling.
• Log and Traffic Analysis: Conduct analysis of security logs, network packet captures, and endpoint data to establish initial scope and indicators of compromise.
• Vulnerability Support: Assist in performing scheduled vulnerability scans, compiling the raw results, and supporting remediation tracking efforts.
• Documentation & Reporting: Create clear, detailed incident reports, providing a timeline of events, initial findings, and recommended next steps for further investigation.
• Process Adherence: Ensure all incident detection and classification services strictly adhere to established procedures and customer-defined Service Level Agreements (SLAs).
• Threat Intelligence: Continuously research emerging threats (TTPs, IOCs, etc.) and assist in updating internal detection and hunting capabilities.
• Operational Excellence: Actively identify opportunities for the automation of routine tasks and improvements in SOC workflow efficiency.
• Collaboration: Effectively communicate security issues and investigation findings to customers and internal teams, both verbally and in writing.
• Work within a 24x7x365 Security Operations Center, supporting a rotating shift schedule to ensure continuous coverage for multiple customers.

Minimum Requirements

• 4+ years of experience in an operational technology environment, a related internship, or relevant education.
• Foundational knowledge of core networking principles (TCP/IP, DNS, HTTP) and general system architecture (Windows/Linux).
• Exposure to or direct experience with security monitoring platforms, preferably a SIEM solution.
• Solid understanding of the cyber security threat landscape, including common attack types and vectors (e.g., phishing, malware).
• Demonstrated analytical, problem-solving, and critical thinking skills with the ability to process large amounts of data.
• Strong verbal and written communication skills for documentation and professional interaction with clients and peers.

Preferred Qualifications

• Relevant industry certification such as CompTIA Security+, CompTIA CySA+, or Microsoft SC-200.
• Experience with scripting languages (e.g., Python, PowerShell) for task automation.
• Academic background (degree or coursework) in Computer Science, Cyber Security, or a related field.
• Familiarity with various security management tools (e.g., vulnerability scanners, EDR, firewalls).
• Proven ability to work effectively under pressure and rapidly changing priorities.