Senior SOC Analyst

CloudBees; Chennai District; On-site; INR 1,200,000 - 1,500,000; Full time

Benefits offered by this job

Benefits & vacation package

Team outings

Casual environment

Growth opportunities

Job summary

CloudBees is recruiting a Senior SOC Analyst to help secure its SaaS cloud and enterprise environments from Chennai. You will build detections, automate workflows, and partner with GRC and Product Security to enhance telemetry across tools and products.

The role requires SOC experience, SIEM proficiency, and strong cross-functional communication to support security initiatives and incident response across a fast-growing company.

Qualifications

• 3+ years in a global SOC.
• Familiarity with tuning SIEM detection logic.
• Knowledge of SOC SOPs and security solutions.
• Ability to analyze endpoint, network, and application logs.
• Excellent communication with Security and Engineering teams.
• Knowledge of common Internet protocols and applications.
• Working knowledge of cloud services (AWS, GCP, or Azure).
• Familiarity with DevOps/SDLC; scripting or SOAR is a plus.
• Relevant certifications such as GCIH, GCIA, GCDA, GCED or AWS Security Specialty.

Responsibilities

• Provide security monitoring and incident response of cyber security events in a high availability SaaS cloud environment and enterprise.
• Directly or indirectly support internal and external customers.
• Monitor and analyze Security Information and Event Management (SIEM) alerts to identify security issues.
• Operate security tools like SIEM, EDR, DLP, CNAPP, vulnerability management solutions, and others.
• Develop correlation rules to expand our threat detection capability; enrich the rules with threat intelligence.
• Perform threat hunting to proactively detect incidents.
• Investigate, document, and report on information security issues and emerging trends.

Skills

SOC Operations

SIEM Tuning

Log Analysis

Cloud Security

DevOps / SDLC

SOAR / Automation

Communication Skills

IP Protocols

Cloud Platforms

Certifications

Tools

SIEM

EDR

DLP

CNAPP

Vulnerability Mgmt

Job description

CloudBees helps organizations build, run, and govern software factories, giving enterprises the confidence to ship software better, faster, and safer.

Writing code is no longer the bottleneck. Governing what reaches production and validating its impact is. As enterprises adopt agentic coding, software is created faster than most teams can review, secure, and validate. Without consistent governance, organizations risk shipping code they cannot explain, audit, or trust.

CloudBees addresses this challenge without asking teams to replace the tools they already use. Across every toolchain a customer runs, CloudBees makes each change, human or AI, visible, auditable, and accountable before it reaches production. CloudBees Unify is the product behind this: a governance layer, with context and control-plane capabilities, that enforces consistent policy and evidence across every tool, team, and workflow.

Founded in 2010, CloudBees is backed by Goldman Sachs, Morgan Stanley, Bridgepoint Capital, HSBC, Golub Capital, Delta-v Capital, Matrix Partners, and Lightspeed Venture Partners.

We have a new opening for a Senior SOC Analyst to join our team. This is not a traditional SOC role. Instead of spending your entire day triaging alerts, you'll mainly work on different cyber security projects such as building detection logic, automating repetitive workflows and partnering closely with GRC and Product Security to improve security telemetry across the CloudBees enterprise and product environment.

The role has wide ranging responsibilities for the Information Security department; including undertaking business as usual activities like alert triage, technical incident management, improving threat detections, consuming threat intelligence, assessing cloud risks, vulnerability assessment, and working on various other cyber security projects.

Previous experience working in a SOC team is necessary as well as being able to operate SIEM, EDR, DLP, CNAPP, and other core SOC tools.

You will join a team of globally dispersed SOC Analysts and must be able to work in a

highly dynamic environment. If you are a proactive self-starter that is looking to join a fast-growing team, we would love to hear from you.

What Success Looks Like:

Within your first year you'll help CloudBees:

• Increase detection coverage across enterprise and production (cloud) environments.
• Improve automation throughout Security Operations by utilising AI.

What You'll Get:

• Highly competitive benefits and vacation package.
• Ability to work for one of the fastest growing companies with some of the most talented people in the industry.
• Team outings.
• Fun, Hardworking, and Casual Environment.
• Endless Growth Opportunities.

Requirements

What you will do:

• Provide security monitoring and incident response of cyber security events in a high availability SaaS cloud environment and enterprise
• Directly or indirectly support internal and external customers
• Monitor and analyze Security Information and Event Management (SIEM) alerts to identify security issues
• Operate security tools like SIEM, EDR, DLP, CNAPP, vulnerability management solutions, and others
• Develop correlation rules to expand our threat detection capability; enrich the rules with threat intelligence
• Perform threat hunting to proactively detect incidents
• Investigate, document, and report on information security issues and emerging trends.

Who you are:

• 3+ years of experience working within a global Security Operations Center (SOC)
• Familiarity with tuning and/or configuring SIEM detection logic
• Knowledge of SOC standard operating procedures and mainstream security solutions
• Ability to analyze endpoint, network, and application logs
• Excellent communication skills with both Security and Engineering teams
• Knowledge of common Internet protocols and applications
• Working knowledge of cloud services (AWS, GCP, or Azure)
• Familiarity with software development environments (DevOps) and SDLC is a plus
• Scripting / SOAR / security automation experience is a plus
• Relevant certifications including GCIH, GCIA, GCDA, GCED or AWS Security Specialty are a plus