Senior Security Analyst

Infosec Al Arabia; Kozhikode district; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Infosec Al Arabia is seeking an experienced SOC leader to manage analysts and security engineers across daily operations, incident response, and threat hunting. You will refine playbooks, escalation workflows, and engagement with customers and vendors while aligning with ISO 27001, NIST, and MITRE ATT&CK frameworks.

The role requires hands-on SIEM administration, EDR/XDR, and firewall platforms, with strong reporting and stakeholder management skills to drive security postures for complex

Qualifications

• Bachelor's degree in a cybersecurity-related field is required.
• 6–10 years of experience in cybersecurity, SOC operations or related roles.
• Experience leading SOC analysts and security engineers.

Responsibilities

• Lead and manage SOC analysts and security engineers, including workload allocation, escalations, mentoring, and service delivery.
• Oversee daily SOC operations, incident management, threat hunting, and complex security investigations.
• Develop and improve SOC procedures, playbooks, escalation workflows, and operational processes.
• Manage and optimize SIEM, EDR/XDR, firewalls, IDS/IPS, VPN, WAF, DLP, NAC, Email Security, and related security platforms.
• Oversee SIEM use cases, detection rules, alert tuning, dashboards, log integrations, and detection coverage aligned with MITRE ATT&CK.
• Lead major incident response activities including containment, recovery, root cause analysis, and post-incident review.
• Support cybersecurity governance, risk, audit, and compliance activities aligned with ISO 27001, NIST, and customer requirements.
• Review and maintain security policies, procedures, standards, and operational documentation.
• Coordinate with customers, vendors, infrastructure, network, cloud, application, and business teams on security matters.
• Track SOC KPIs, SLAs, incident trends, and service performance, and prepare management and executive-level reports.

Skills

SOC Leadership

Security Operations

Security Engineering

SIEM Administration

Detection Engineering

Incident Response

Forensics

Threat Hunting

Threat Intelligence

Security Architecture

ISO 27001

NIST

Documentation

Stakeholder Management

Education

Bachelor's degree in Cyber Security, Information Security, Computer Science, Information Technology, or related discipline

Tools

Microsoft Sentinel

SentinelOne

Microsoft Defender for Endpoint

CrowdStrike

Job description

Role & responsibilities

• Lead and manage SOC analysts and security engineers, including workload allocation, escalations, mentoring, and service delivery.


• Oversee daily SOC operations, incident management, threat hunting, and complex security investigations.


• Develop and improve SOC procedures, playbooks, escalation workflows, and operational processes.


• Manage and optimize SIEM, EDR/XDR, firewalls, IDS/IPS, VPN, WAF, DLP, NAC, Email Security, and related security platforms.


• Oversee SIEM use cases, detection rules, alert tuning, dashboards, log integrations, and detection coverage aligned with MITRE ATT&CK.


• Lead major incident response activities including containment, recovery, root cause analysis, and post-incident review.


• Support cybersecurity governance, risk, audit, and compliance activities aligned with ISO 27001, NIST, and customer requirements.


• Review and maintain security policies, procedures, standards, and operational documentation.


• Coordinate with customers, vendors, infrastructure, network, cloud, application, and business teams on security matters.


• Track SOC KPIs, SLAs, incident trends, and service performance, and prepare management and executive-level reports.

Preferred candidate profile

Required Qualifications

• Bachelor's degree in Cyber Security, Information Security, Computer Science, Information Technology, or related discipline.


• Minimum 6-10 years of experience in cybersecurity, SOC operations, security engineering, or related security roles.


• Previous experience leading SOC analysts, cybersecurity engineers, or security operations teams.


• Strong hands-on experience with SIEM administration and detection engineering.


• Experience with Microsoft Sentinel and other enterprise SIEM platforms.


• Strong experience with EDR/XDR technologies including SentinelOne, Microsoft Defender for Endpoint, CrowdStrike, or equivalent platforms.


• Strong knowledge of enterprise firewall technologies including Palo Alto, Fortinet, and Cisco.


• Experience with IDS/IPS, VPN, WAF, DLP, NAC, Email Security, and vulnerability management technologies.


• Strong understanding of incident response, threat hunting, security monitoring, and forensic investigation processes.


• Experience developing SOC processes, incident response procedures, detection use cases, and security playbooks.


• Knowledge of NIST, MITRE ATT&CK, ISO 27001, and cybersecurity governance principles.


• Experience supporting security audits, risk assessments, and compliance activities.


• Strong troubleshooting, analytical, and technical decision-making capabilities.


• Strong documentation, reporting, presentation, and stakeholder management skills.

Preferred Certifications

Relevant certifications may include:

• CISSP


• CISM


• Microsoft Security Certifications


• GIAC / Incident Response / SOC-related certifications


• CEH


• Palo Alto PCNSA / PCNSE


• Fortinet FCP / FCSS or equivalent

Key Skills

• SOC Leadership & Team Management


• Security Operations Management


• Security Engineering


• SIEM Engineering & Administration


• Detection Engineering


• Incident Response & Forensics


• Threat Hunting


• Threat Intelligence


• Security Architecture & Infrastructure


• ISO 27001 & NIST Cybersecurity Framework