SOC Analyst – Cloud Security Operations

Delta6Labs FinTech Pvt Ltd; India; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

Delta6Labs FinTech Pvt Ltd is seeking a Cloud Security Analyst to monitor and investigate cloud-focused incidents in their organization. The role involves analyzing suspicious cloud activities and correlating findings across multiple platforms to ensure security.

The ideal candidate will have expertise in AWS security investigations, log analysis, and familiarity with tools like CrowdStrike and NetSkope. Preferred certifications include AWS Security Specialty and Security+. Join us to contribute to a secure fintech environment.

Qualifications

• Experience in cloud security operations and incident investigation.
• Familiarity with AWS and cloud platforms.
• Ability to analyze logs for anomalies and suspicious behavior.

Responsibilities

• Conduct investigations of suspicious activity across AWS and other cloud services.
• Analyze CloudTrail logs for anomalous cloud access.
• Investigate Netskope surfaced risky SaaS and cloud-app activity.
• Assist in coordinating remediation with DevSecOps and IT teams.

Skills

Cloud Security Operations

AWS security investigations

Cloud log analysis

Operational awareness of hosted web/application platforms

CrowdStrike

NetSkope

Education

AWS Security Specialty

Security+

CySA+

SC-200

Job description

The candidate will be responsible for cloud-focused monitoring, investigation, and escalation support across the organization’s hosted environment. The analyst will review suspicious cloud behavior, privilege misuse, configuration-related exposure, abnormal API activity, and cloud-originated attack paths, while correlating findings with endpoint, email, identity, and application telemetry.

The role supports the current traditional SOC baseline while helping the SOC mature into a crypto-/fintech-aware function by identifying cloud incidents that may affect sensitive operations, high-risk internal services, or customer-facing business systems.

Key Responsibilities

• To conduct investigations of suspicious activity spanning across AWS and other cloud services
• Analyze CloudTrail logs for anomalous cloud access, privilege misuse, access key issues, unusual API calls, and suspicious console behavior
• Connect cloud events to CrowdStrike, Netskope, Cloudflare, Sentry & Vercel context
• Investigate Netskope surfaced risky SaaS and cloud-app activity
• Investigate usage of unauthorized applications, and risky movement of files — abnormal user activity or a policy breach that increases the cloud attack surface
• Analyze cloud alerts with their operational or business impact
• Restrict, escalate incidents affecting critical services, administrative workflows, or sensitive data paths
• Assist in coordinating remediation with DevSecOps, IAM, and IT teams
• Suggest improvements in visibility, detection, and cloud monitoring coverage

Mandatory Expertise

• Cloud Security Operations

Good to Have

• CrowdStrike and/or NetSkope

Optional

• Microsoft AD

Preferred Additional Skills

• AWS security investigations
• Cloud log analysis
• Cloud access anomaly review
• Cloud attack-path awareness
• Basic application telemetry correlation using Sentry
• Operational awareness of hosted web/application platforms such as Vercel

Preferred Certifications

• AWS Security Specialty
• Security+
• CySA+
• SC-200

Success Measures

• Quality of cloud incident validation
• Accuracy of severity and impact assessment
• Timeliness of escalation for cloud misuse or suspicious access
• Quality of coordination with DevSecOps / IAM / IT
• Detection improvement recommendations for cloud-related threats