Sr. Cybersecurity Analyst

1072-28 Target India (Non-USA); Bengaluru; On-site; INR 1,800,000 - 3,200,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Paid time off

Job summary

Target India (Non-USA) in Bengaluru seeks a Senior Security Operations Analyst to act as a technical SME and primary escalation point for the security operations team.

You will drive complex investigations, containment strategies, and automated playbooks, mentoring Analysts and Associate Analysts while upholding response standards across cloud and on‑prem environments.

Qualifications

• 5+ years in security operations, incident response, or related cyber defense roles.
• Experience evaluating security logs, IoCs, and threat assessments.
• Strong understanding of networks, IAM, endpoints, and OSI model.
• Experience with cloud and on‑prem environments.

Responsibilities

• Analyze escalated security incidents and validate controls against standards.
• Map affected systems using threat intelligence and reconstruct attack timelines.
• Design and implement containment strategies and automated playbooks.
• Coordinate with cross‑functional teams to eradicate threats and restore systems.
• Drive incident containment timelines and document actions in the incident platform.
• Mentor Analysts and Associate Analysts to raise team capability.
• Improve detection logic and response processes through automation.
• Contribute to post‑incident analysis and lessons learned reports.

Skills

5+ years experience

Security operations

Incident response

Threat intelligence

Analytical thinking

Python scripting

Communication

Collaboration

Tools

CrowdStrike Falcon

Okta

Zscaler

SIEM/SOAR (Google SecOps)

Job description

About us:

Working at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture. Learn more about Target here.

Senior Security Operations Analyst Position Overview

As a Senior Security Operations Analyst, you will serve as a technical subject matter expert and primary escalation point for the security operations team. In this role, you will drive the investigation and containment of complex security incidents with little to no direction, taking on the most complicated technical tasks. You are responsible for driving process and technology changes within our current framework to improve detection and response capabilities. You will ensure that all security solutions are production-ready, scalable, and resilient. A key part of your role involves providing mentorship and technical coaching to Analysts and Associate Analysts, elevating team capabilities and ensuring adherence to established response standards across the cloud infrastructure and engineering teams.

How You Can Make an Impact

Analyze and Validate Incidents:

Perform advanced analysis of escalated security anomalies and ensuring the quality of the team's security controls and infrastructure meets organizational standards.

Understand Scope & Affected Systems:

Leverage threat intelligence (indicators of compromise, updated rules) to reconstruct attack timelines and map out impacted cloud workloads or systems.

Design and implement complex containment strategies:

Design and implement complex containment strategies and automated response playbooks, ensuring solutions are production-ready, deployable, and high-performance.

Coordinate Strategic Mitigation:

Assist in coordinating with cross-functional technical team to eradicate active threats and ensure system restoration.

Manage Response Timelines:

Assist in driving incident containment and meticulously document all response steps, investigative data, and timelines in our incident management platform (FireHydrant).

Mentorship & Guidance:

Provide technical mentorship and coaching to Analysts and Associate Analysts, helping to elevate team capabilities and ensuring consistent adherence to response processes.

Process Improvement:

Drive process and technology changes to improve efficiency and security efficacy, proactively identifying deficiencies and recommending enhancements to detection logic.

Conduct Post-Incident Analysis:

Participate in post-incident analysis, assist in determining root causes, and contribute to reports sharing lessons learned with system owners.

Requirements Professional Experience:

5+ years of professional hands-on experience in security operations, dedicated incident response, or related technical cyber defense environments.

Technical Investigation:

Demonstrated capability in evaluating security logs, analyzing indicators of compromise (IoCs), and performing secondary threat assessments.

• Core Security Mindset: Solid understanding of fundamental security concepts, including network protocols, operating systems, IAM, endpoint protection, and the OSI model.

Analytical Problem Solving:

Highly analytical with a proven ability to think critically, multitask, and design tactical remediation strategies under pressure during high-severity events.

Collaborative Communication:

Excellent written and verbal communication skills, with the ability to convey complex incident scopes simply and concisely when coordinating with system owners. Ability to work across teams to research solutions.

Autonomy & Planning:

Ability to plan, estimate, and manage your own work over multiple sprints with little to no direction. Accountable for delivering solutions that are production-ready, scalable, and resilient.

Technical Depth:

Focused on taking on the most complicated technical tasks, including advanced threat hunting, forensic analysis, or complex incident response across cloud and on-prem environments.

Operational Standards:

Strong commitment to shared accountability, attention to detail, and a structured, team-oriented approach to cybersecurity.

Nice to Have Experience with cloud platforms (GCP preferred) and container orchestration security concepts (Docker, Kubernetes):

Familiarity with scripting (Python, Bash) or managing detection-as-code and automated response playbooks. Hands-on experience with core security systems such as CrowdStrike Falcon, Okta, and Zscaler. Prior experience navigating and querying SIEM/SOAR suites (Google SecOps). Understanding of retail-specific threat landscapes and standard compliance frameworks (e.g., PCI DSS, SOC2).

Target is one of the world’s most recognized brands and one of America’s leading retailers.

Target is committed to responsible corporate citizenship, ethical business practices, environmental stewardship and generous community support.

Since 1946, we have given 5 percent of our profits back to our communities. Our goal is to work as one team to fulfill our unique brand promise to our guests, wherever and whenever they choose to shop.

We'll contact you if you're selected for next steps. In the meantime, follow us at A Bullseye View for the latest news.

Our Benefits

Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at https://corporate.target.com/careers/benefits.