Senior Specialist, Information Security Analyst

BNY; Mumbai; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

BNY in Pune, India, is seeking a Senior Specialist-SOC Analyst to join our Security Operations Center. You will lead triage, investigate alerts, and coordinate incident response across SIEM, EDR, and cloud logs, driving containment and recovery.

The role requires 5+ years in SOC, hands-on expertise with SIEM/EDR/SOAR, MITRE ATT&CK familiarity, and strong scripting skills. You will mentor junior analysts and help tune detections while ensuring regulatory compliance.

Qualifications

• 5+ years in SOC operations, incident response, or threat detection (Tier 2).
• Hands-on with SIEM (Splunk, Sentinel, QRadar), EDR (CrowdStrike, Defender), and SOAR.
• Understanding of network security, Windows/Linux, and identity management, plus cloud monitoring.
• Experience with MITRE ATT&CK, threat hunting, and tuning detections; NIST/NIST CSF/CIS Controls.
• Strong analytics, problem-solving, and stakeholder management; scripting ability.

Responsibilities

• Lead triage and investigation of security alerts; coordinate incident response.
• Perform root cause analysis, scope assets, and drive containment and recovery.
• Correlate events across SIEM/EDR/IDS/IPS, cloud logs, and identity platforms to reduce false positives.
• Develop and maintain SOC playbooks, runbooks, and MITRE-aligned detection logic.
• Mentor analysts and guide investigation techniques and documentation standards.
• Coordinate with Threat Intelligence to track TTPs and hunt indicators of compromise.
• Collaborate with Engineering to tune detections and improve log fidelity.
• Create incident reports and executive summaries; contribute to metrics.
• Support purple team exercises and post-incident reviews for lessons learned.
• Ensure compliance with regulatory policies and audit-ready documentation.

Skills

SIEM platforms

EDR tools

SOAR platforms

Network security

Windows/Linux systems

Identity management

Cloud logging/monitoring

MITRE ATT&CK framework

Threat hunting

Detection tuning

Incident response frameworks

Scripting (Python, PowerShell)

Documentation/Executive reporting

Large-scale SOC experience

Shift/weekend coverage flexibility

Tools

ServiceNow

Threat intelligence platforms

Malware analysis tools

Job description

Job Description

Job Description We’re seeking a future team member for the role of

Pune, India

In this role, you’ll make an impact in the following ways:

• Lead triage and investigation of security alerts, escalating and coordinating incident response as needed.
• Perform root cause analysis, scope affected assets, and drive containment, eradication, and recovery.
• Correlate events across SIEM, EDR, IDS/IPS, firewalls, cloud logs, and identity platforms to identify true positives and reduce false positives.
• Develop, refine, and maintain SOC playbooks, runbooks, and detection logic aligned to the MITRE ATT&CK framework.
• Mentor junior analysts and provide guidance on investigation techniques, documentation standards, and operational best practices.
• Coordinate with Threat Intelligence to enrich investigations, track adversary TTPs, and proactively hunt for indicators of compromise.
• Partner with Engineering teams to tune detections, improve log fidelity, and strengthen preventive controls.
• Create clear, actionable incident reports and executive summaries; contribute to metrics and trend analysis.
• Support purple team exercises and post-incident reviews to capture lessons learned and drive continuous improvement.
• Ensure adherence to regulatory and security policies; maintain audit-ready documentation for investigations and incidents.

Job Description

We’re seeking a future team member for the role of Senior Specialist-SOC Analyst to join our Security Operations center team. This role is located in Pune, India

In this role, you’ll make an impact in the following ways:

• Lead triage and investigation of security alerts, escalating and coordinating incident response as needed.
• Perform root cause analysis, scope affected assets, and drive containment, eradication, and recovery.
• Correlate events across SIEM, EDR, IDS/IPS, firewalls, cloud logs, and identity platforms to identify true positives and reduce false positives.
• Develop, refine, and maintain SOC playbooks, runbooks, and detection logic aligned to the MITRE ATT&CK framework.
• Mentor junior analysts and provide guidance on investigation techniques, documentation standards, and operational best practices.
• Coordinate with Threat Intelligence to enrich investigations, track adversary TTPs, and proactively hunt for indicators of compromise.
• Partner with Engineering teams to tune detections, improve log fidelity, and strengthen preventive controls.
• Create clear, actionable incident reports and executive summaries; contribute to metrics and trend analysis.
• Support purple team exercises and post-incident reviews to capture lessons learned and drive continuous improvement.
• Ensure adherence to regulatory and security policies; maintain audit-ready documentation for investigations and incidents.

To be successful in this role, we’re seeking the following:

• 5+ years of experience in SOC operations, incident response, or threat detection (Tier 2 level).
• Strong hands-on expertise with: SIEM platforms (e.g., Splunk, Sentinel, QRadar) , EDR tools (e.g., CrowdStrike, Microsoft Defender) , SOAR platforms
• Deep understanding of: Network security, Windows/Linux systems, and identity management , Cloud logging and security monitoring
• Experience with: MITRE ATT&CK framework, threat hunting, and detection tuning , Incident response frameworks (NIST 800-61, NIST CSF, CIS Controls)
• Strong analytical, problem-solving, and stakeholder management skills.
• Proficiency in scripting/automation (Python, PowerShell).
• Excellent documentation and communication skills, including executive reporting.
• Relevant certifications such as GCIH, GCIA, GCFA, GNFA, CISSP, or CCSP or equivalent experience
• Experience with: Case management tools (e.g., ServiceNow) , Threat intelligence platforms and malware analysis tools
• Prior exposure to large-scale enterprise SOC environments.
• The position requires flexibility to work across shifts and to support weekend and public holiday coverage as operational needs require.

About Us

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what is all about. Join us and be part of something extraordinary.

About The Team

At BNY, our culture speaks for itself, check out the latest BNY news at: BNY Newsroom & BNY LinkedIn

Here’s a Few Of Our Recent Awards

• America’s Most Innovative Companies, Fortune, 2025
• World’s Most Admired Companies, Fortune 2025
• "Most Just Companies", Just Capital and CNBC, 2025

Our Benefits And Rewards

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life’s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.

BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.