SOC Analyst – Cloud Security Operations

Delta6Labs; Dadri; On-site; INR 600,000 - 900,000; Full time

Job summary

Delta6Labs seeks a Cloud Security Analyst to monitor and investigate cloud-based security events across AWS and other platforms, with escalation support across the organization.

You will analyze CloudTrail logs, correlate cloud events with endpoint and identity telemetry, and coordinate remediation with DevSecOps, IAM, and IT teams in a 24x7 environment.

Qualifications

• Experience in cloud security operations and investigations.

Responsibilities

• Monitor, investigate, and escalate cloud security incidents across AWS and other cloud services.
• Analyze CloudTrail logs for anomalous access and privilege misuse.
• Coordinate remediation with DevSecOps, IAM, and IT teams.
• 24×7 operations to ensure continuous protection.

Job description

Summary

The candidate will be responsible for cloud-focused monitoring, investigation, and escalation support across the organization’s hosted environment. The analyst will review suspicious cloud behavior, privilege misuse, configuration-related exposure, abnormal API activity, and cloud-originated attack paths, while correlating findings with endpoint, email, identity, and application telemetry.

Key Responsibilities

• To conduct investigations of suspicious activity spanning across AWS and other cloud services
• Analyze CloudTrail logs for anomalous cloud access, privilege misuse, access key issues, unusual API calls, and suspicious console behavior
• Connect cloud events to CrowdStrike, Netskope, Cloudflare, Sentry & Vercel context
• Investigate Netskope surfaced risky SaaS and cloud-app activity
• Investigate usage of unauthorized applications, and risky movement of files — abnormal user activity or a policy breach that increases the cloud attack surface
• Analyze cloud alerts with their operational or business impact
• Restrict, escalated incidents affecting critical services, administrative workflows, or sensitive data paths
• Assist in coordinating remediation with DevSecOps, IAM, and IT teams
• Suggest improvements in visibility, detection, and cloud monitoring coverage
• 24×7 operations

Mandatory Expertise

• Cloud Security Operations

Good to Have

• CrowdStrike and/or NetSkope

Optional

• Microsoft AD

Preferred Additional Skills

• AWS security investigations
• Cloud log analysis
• Cloud access anomaly review
• Cloud attack-path awareness
• SaaS/cloud usage monitoring
• Basic application telemetry correlation using Sentry
• Operational awareness of hosted web/application platforms such as Vercel

Preferred Certifications

• AWS Security Specialty
• Security+
• CySA+
• SC-200

Success Measures

• Quality of cloud incident validation
• Accuracy of severity and impact assessment
• Timeliness of escalation for cloud misuse or suspicious access
• Quality of coordination with DevSecOps / IAM / IT
• Detection improvement recommendations for cloud-related threats

Job Summary

Location Noida, India/Dubai, UAE

Job Type Full-time

Date Posted June 19, 2026

Experience 5-7 Years

Working Hours 9:00 AM - 6:00 PM