Senior Service Desk Analyst – Security Operations

Eastvantage Group; Bengaluru; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

Eastvantage Group is seeking a Senior Service Desk Analyst – Security Operations in Bengaluru. You will serve as a senior technical authority for complex security incidents, drive advanced triage, and oversee incident response across global client environments.

You will work with EDR/XDR platforms like CrowdStrike Falcon and Microsoft Defender, analyze telemetry, and mentor junior analysts to strengthen security posture.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, Information Systems, or related field.
• 5+ years in cybersecurity/SOC/incident response, 2+ years in L2/Senior Analyst.
• Experience in SOC/MSSP/enterprise security environment preferred.

Responsibilities

• Act as primary escalation point for complex security incidents across multi-cloud and hybrid environments.
• Investigate host activity with EDR/XDR platforms; contain endpoints as needed.
• Analyze telemetry with Darktrace and network data to uncover threats; ensure SLAs.
• Oversee incident lifecycle; conduct RCA and forensics to prevent recurrence.
• Collaborate with Identity teams to investigate credential-based threats in Entra ID/Azure AD.
• Design and tune detection rules, automation playbooks, and alert correlations.
• Document incident reports and SOPs for internal and client-facing updates.
• Mentor junior analysts and perform QA on incident documentation and containment protocols.

Skills

Threat triage

Incident response

EDR/XDR

SOC operations

Mentorship

Education

Bachelor's degree (Cybersecurity/IT/CS)

Tools

CrowdStrike Falcon

Microsoft Defender XDR

Darktrace

Job description

We're Hiring: Senior Service Desk Analyst – Security Operations!

As a Senior Service Desk Analyst , you will serve as a senior technical authority and primary escalation point for complex security incidents across global client environments. Beyond providing advanced threat triage and tier-2 incident response, you will drive operational excellence by overseeing complex threat mitigation, optimizing endpoint and cloud security telemetry, and mentoring junior analysts. This role requires strategic problem-solving, deep analytical skills with modern EDR/XDR ecosystems, and a proactive approach to continuous security posture enhancement

What You'll Do:

• Advanced Threat Triage & Incident Escalation: Act as the primary escalation point for complex security anomalies, false-positive tuning, and high-priority alerts across multi-cloud and hybrid environments.
• Endpoint Detection & Response (EDR/XDR Operations): Leverage platforms such as CrowdStrike Falcon and Microsoft Defender to investigate host activity, isolate compromised endpoints, review threat telemetry, and execute precise containment workflows.
• Behavioral Analysis & Anomaly Detection: Utilize Darktrace self-learning AI and network telemetry to uncover sophisticated, stealthy, or unknown threats, analyzing behavioral shifts and unusual lateral movement across enterprise networks.
• Incident Lifecycle & Problem Management: Oversee the complete incident lifecycle for critical security alerts. Conduct comprehensive Root Cause Analysis (RCA) and forensic investigations to prevent recurring threat vectors and ensure strict SLA adherence.
• Identity & Access Security Integration: Partner with Identity teams to investigate identity-based threats, suspicious authentications, and compromised credentials across Entra ID / Azure AD environments.
• Process Automation & Playbook Tuning: Evaluate existing security monitoring workflows to design, implement, and optimize detection rules, automated playbooks, and alert correlation logic across security tooling.
• Documentation & Threat Governance: Author and maintain advanced technical incident reports, forensic documentation, and standard operating procedures (SOPs) for internal team execution and client-facing updates.
• Mentorship & Quality Oversight: Coach, train, and guide junior analysts. Perform quality assurance reviews on incident response documentation, communication clarity, and containment protocols.

What We're Looking For:

• Bachelor’s degree in Cybersecurity, IT, Computer Science, Information Systems, Computer Engineering, or related field. Relevant technical diploma may be considered with strong cybersecurity experience.
• Minimum 5 years of hands-on cybersecurity/SOC, security operations, or incident response experience, including 2+ years in an L2/Senior Analyst or equivalent role.
• Experience in a SOC, MSSP, or enterprise security environment preferred.
• Strong experience in alert triage, incident investigation, threat detection, containment, RCA, and escalation.
• Hands-on experience with EDR/XDR, preferably CrowdStrike Falcon and/or Microsoft Defender XDR.
• Working knowledge of SIEM, Entra ID/Azure AD, endpoint/cloud security, IOCs, threat hunting, and incident response.
• Experience with detection tuning, automation/playbooks, and Darktrace or equivalent behavioral analytics is an advantage.
• Mandatory Certification: CompTIA Security+ or equivalent recognized cybersecurity certification.
• Preferred Certifications: CrowdStrike Certified Falcon Administrator
• Strong analytical, problem-solving, communication, and documentation skills.
• Ability to independently handle complex incidents and mentor junior analysts

If you're ready to advance your career in Security Operations, and join our dynamic team!