Senior Service Desk Analyst – Security Operations

Eastvantage Group; Bengaluru Urban; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

Eastvantage Group is seeking a Senior Service Desk Analyst – Security Operations in Bangalore to lead advanced threat triage and incident escalation. You will investigate, contain, and resolve complex security events across multi‑cloud and hybrid environments, with a focus on RCA and rigorous documentation.

You will work with EDR/XDR platforms like CrowdStrike Falcon and Defender, perform threat hunting, and mentor junior analysts while ensuring adherence to strict SLAs and governance standards.

Qualifications

• Bachelor’s degree in a cybersecurity‑related field or equivalent experience.
• Hands‑on cybersecurity/SOC experience with L2/Senior Analyst responsibilities.
• Strong knowledge of EDR/XDR tools and threat hunting fundamentals.

Responsibilities

• Serve as primary escalation point for complex security incidents and high‑priority alerts.
• Investigate host activity, contain threats, and coordinate remediation actions.
• Lead RCA and incident reviews to prevent recurrence and improve SLAs.
• Collaborate with Identity teams on credential and access threats.
• Tune detection rules, playbooks, and alert correlations across tools.
• author and maintain incident reports, SOPs, and governance documentation.
• Mentor junior analysts and perform quality reviews of IR work.

Skills

Security Operations

Incident Response

Threat Intelligence

Mentorship

Documentation

Education

Bachelor's in Cybersecurity

Diploma/Relevant Certificate

Tools

CrowdStrike Falcon

Microsoft Defender XDR

Darktrace

SIEM

Job description

We're Hiring: Senior Service Desk Analyst – Security Operations!

Location: Bangalore Urban, India
Work Mode: Work from Office
Role: Senior Service Desk Analyst – Security Operations

What You'll Do:

• Advanced Threat Triage & Incident Escalation: Act as the primary escalation point for complex security anomalies, false‑positive tuning, and high‑priority alerts across multi‑cloud and hybrid environments.
• Endpoint Detection & Response (EDR/XDR Operations): Leverage platforms such as CrowdStrike Falcon and Microsoft Defender to investigate host activity, isolate compromised endpoints, review threat telemetry, and execute precise containment workflows.
• Behavioral Analysis & Anomaly Detection: Utilize Darktrace self‑learning AI and network telemetry to uncover sophisticated, stealthy, or unknown threats, analyzing behavioral shifts and unusual lateral movement across enterprise networks.
• Incident Lifecycle & Problem Management: Oversee the complete incident lifecycle for critical security alerts. Conduct comprehensive Root Cause Analysis (RCA) and forensic investigations to prevent recurring threat vectors and ensure strict SLA adherence.
• Identity & Access Security Integration: Partner with Identity teams to investigate identity‑based threats, suspicious authentications, and compromised credentials across Entra ID / Azure AD environments.
• Process Automation & Playbook Tuning: Evaluate existing security monitoring workflows to design, implement, and optimize detection rules, automated playbooks, and alert correlation logic across security tooling.
• Documentation & Threat Governance: Author and maintain advanced technical incident reports, forensic documentation, and standard operating procedures (SOPs) for internal team execution and client‑facing updates.
• Mentorship & Quality Oversight: Coach, train, and guide junior analysts. Perform quality assurance reviews on incident response documentation, communication clarity, and containment protocols.

What We're Looking For:

• Bachelor’s degree in Cybersecurity, IT, Computer Science, Information Systems, Computer Engineering, or related field. Relevant technical diploma may be considered with strong cybersecurity experience.
• Minimum 5 years of hands‑on cybersecurity/SOC, security operations, or incident response experience, including 2+ years in an L2/Senior Analyst or equivalent role.
• Experience in a SOC, MSSP, or enterprise security environment preferred.
• Strong experience in alert triage, incident investigation, threat detection, containment, RCA, and escalation.
• Hands‑on experience with EDR/XDR, preferably CrowdStrike Falcon and/or Microsoft Defender XDR.
• Working knowledge of SIEM, Entra ID/Azure AD, endpoint/cloud security, IOCs, threat hunting, and incident response.
• Experience with detection tuning, automation/playbooks, and Darktrace or equivalent behavioral analytics is an advantage.
• Mandatory Certification: CompTIA Security+ or equivalent recognized cybersecurity certification.
• Preferred Certifications: CrowdStrike Certified Falcon Administrator
• Strong analytical, problem‑solving, communication, and documentation skills.
• Ability to independently handle complex incidents and mentor junior analysts

If you're ready to advance your career in Security Operations, join our dynamic team!