Senior Service Desk Analyst For Security Operations For UK Client

Eastvantage; Bengaluru; Vor Ort; INR 1.200.000 - 2.000.000; Vollzeit

Zusammenfassung

Eastvantage Group in Bangalore is seeking a Senior Service Desk Analyst focused on Security Operations. The role requires hands-on experience as a senior escalation point within a SOC, with expertise in EDR/XDR platforms and threat analysis across multi-cloud environments.

You will lead incident investigations, perform RCA, and collaborate with identity and cloud security teams to contain threats and improve detection rules.

Qualifikationen

• Minimum 5 years in progressive IT and cybersecurity support roles.
• Hands-on senior escalation or L2 analyst experience in SOC or managed security environments.
• Proficiency with CrowdStrike Falcon, Defender XDR, and Darktrace.

Aufgaben

• Act as primary escalation point for complex security anomalies and high-priority alerts.
• Operate EDR/XDR platforms to investigate, contain, and remediate threats.
• Perform behavioral analysis and anomaly detection across multi-cloud and hybrid environments.
• Oversee incident lifecycle, RCA, and forensic investigations to prevent recurrences.
• Collaborate with Identity teams to investigate credential-based threats in Entra ID/Azure AD.
• Design and tune detection rules and playbooks for automated responses.
• Prepare advanced incident reports and SOPs; mentor junior analysts.

Kenntnisse

EDR/XDR Tools

Threat Hunting

Incident Response

SOC Experience

Communication Skills

Tools

CrowdStrike Falcon

Microsoft Defender XDR

Darktrace

Jobbeschreibung

Senior Service Desk Analyst Security Operations

Are you ready to work from office all 5 days a week in Bangalore?

Role & responsibilities

• Advanced Threat Triage & Incident Escalation: Act as the primary escalation point for complex security anomalies, false-positive tuning, and high-priority alerts across multi-cloud and hybrid environments.
• Endpoint Detection & Response (EDR/XDR Operations): Leverage platforms such as CrowdStrike Falcon and Microsoft Defender to investigate host activity, isolate compromised endpoints, review threat telemetry, and execute precise containment workflows.
• Behavioral Analysis & Anomaly Detection: Utilize Darktrace self-learning AI and network telemetry to uncover sophisticated, stealthy, or unknown threats, analyzing behavioral shifts and unusual lateral movement across enterprise networks.
• Incident Lifecycle & Problem Management: Oversee the complete incident lifecycle for critical security alerts. Conduct comprehensive Root Cause Analysis (RCA) and forensic investigations to prevent recurring threat vectors and ensure strict SLA adherence.
• Identity & Access Security Integration: Partner with Identity teams to investigate identity-based threats, suspicious authentications, and compromised credentials across Entra ID / Azure AD environments.
• Process Automation & Playbook Tuning: Evaluate existing security monitoring workflows to design, implement, and optimize detection rules, automated playbooks, and alert correlation logic across security tooling.
• Documentation & Threat Governance: Author and maintain advanced technical incident reports, forensic documentation, and standard operating procedures (SOPs) for internal team execution and client-facing updates.
• Mentorship & Quality Oversight: Coach, train, and guide junior analysts. Perform quality assurance reviews on incident response documentation, communication clarity, and containment protocols.

Preferred candidate profile

• Experience: Minimum of 5 years in progressive IT and cybersecurity support roles, with proven hands-on experience as a senior escalation point or L2 analyst within a Security Operations Center (SOC) or managed security environment.
• Technical Expertise:
• EDR & Security Platforms: Deep proficiency with industry-leading security tools, including CrowdStrike Falcon, Microsoft Defender XDR, and Darktrace, with hands-on experience in alert triage, threat hunting, and containment actions.
• Threat Analysis & Investigation: Demonstrated ability to correlate logs across multi-vendor toolsets, analyze indicators of compromise (IOCs), and distinguish complex attacks from false positives.
• Identity & Cloud Security: Foundational knowledge of identity protection, cloud security posture management, and integration telemetry between endpoint agents and cloud infrastructure.
• Should have good communication skills and good working attitude