Senior Security Analyst

Jobtailor; Pune District; On-site; INR 900,000 - 1,400,000; Full time

Job summary

Jobtailor is seeking a Security Analyst specializing in CSIRT/SOC to monitor, triage, investigate and respond to suspicious activity across all company assets. You will perform log analysis, analyze datasets to support alerts, and provide data-driven insights to improve cybersecurity operations.

You'll create and maintain detection use cases, interface with other teams, perform root cause analysis, and communicate trends to stakeholders.

Qualifications

• Experience in incident response lifecycle at technical and procedural levels.
• Proven ability to perform incident response across different operating systems.
• Strong scripting and automation capabilities.
• Solid IT fundamentals across networking, systems, and applications.
• Experience with cloud infrastructure and incident response in cloud environments.
• Ability to prioritise escalations and communicate clearly.
• Familiarity with EDR and SIEM for incident analysis.

Responsibilities

• Monitor, triage, investigate, and respond to suspicious activity across all company assets.
• Perform log analysis and analyse datasets to support alert and response activities.
• Provide data-driven insights to improve cybersecurity operations.
• Create and maintain detection use cases and implement improvements.
• Interface with other teams as required.
• Perform root cause analysis of security issues.
• Use manual and automated tools to proactively analyse various data.
• Help stakeholders determine the best course of action to remedy problems.
• Communicate cybersecurity trends and share ideas and knowledge with team members, leadership, and stakeholders.
• Identify improvements to technology, processes, and techniques to enhance detection and response capabilities.
• Ensure the ongoing core objectives of the CSIRT are accomplished and measurable.
• Participate in the Security on-call rota.

Skills

Incident Response

Log Analysis

Root Cause Analysis

Scripting

Automation

Cybersecurity Operations

Data Analysis

Problem Solving

Triage

Detection Use Cases

Tools

EDR Tools

SIEM Tools

Automated Tools

Manual Tools

Job description

• Monitor, triage, investigate, and respond to suspicious activity across all company assets


• Perform log analysis and analyse datasets to support alert and response activities


• Provide data-driven insights to improve cybersecurity operations


• Create and maintain detection use cases and implement improvements


• Interface with other teams as required


• Perform root cause analysis of security issues


• Use manual and automated tools to proactively analyse various data


• Help stakeholders determine the best course of action to remedy problems


• Communicate cybersecurity trends and share ideas and knowledge with team members, leadership, and stakeholders


• Identify improvements to technology, processes, and techniques to enhance detection and response capabilities


• Ensure the ongoing core objectives of the CSIRT are accomplished and measurable


• Participate in the Security on-call rota

Requirements

• Minimum 3+ years working in security practices (CSIRT/SOC experience preferred)


• Demonstrable experience of the incident response lifecycle at both technical and procedural level


• Demonstrable experience performing incident response across different operating systems


• Ability to solve problems using scripting and automation


• Strong understanding of IT fundamentals across networking, system, and application layers


• Strong understanding of cloud infrastructure and experience of incident response in cloud environments


• Ability to prioritize incoming escalations and requests appropriately using clear communications


• Strong knowledge of Endpoint Detection and Response (EDR) tools for incident analysis


• Expert knowledge of Security Incident & Event Monitoring (SIEM) tools for incident analysis


• Willingness to be part of an on-call rota for out-of-hours escalations

Core Competencies

Demonstrates expertise in incident response, including the ability to analyze and respond to security incidents across various operating systems and cloud environments. Proficient in using EDR and SIEM tools to enhance cybersecurity operations and improve detection and response capabilities.

Highest-signal resume keywords

• Incident Response Lifecycle


• Endpoint Detection and Response (EDR)


• Security Incident & Event Monitoring (SIEM)


• Cloud Infrastructure Incident Response


• Log Analysis

Hard Skills

• Incident Response


• Log Analysis


• Root Cause Analysis


• Scripting


• Automation


• Cybersecurity Operations


• Data Analysis


• Problem Solving


• Triage


• Detection Use Cases

Soft Skills

• Clear Communication


• Collaboration


• Stakeholder Engagement


• Prioritization

Industry Keywords

• CSIRT


• SOC


• Cybersecurity


• Incident Response


• Cloud Environments


• IT Fundamentals


• Networking


• System Layers


• Application Layers

Tools & Technologies

• EDR Tools


• SIEM Tools


• Automated Tools


• Manual Tools