Sr Information Security Analyst

Empower Global Business Services India Private Limited; Karnataka; Hybrid; INR 1,200,000 - 2,100,000; Full time

Job summary

Empower Global Business Services India Private Limited is seeking a Senior Information Security Analyst to support the Cyber Defense Center on the India first shift. This role focuses on senior security monitoring, alert triage, incident response support, risk analysis, and coordination of daily CDC activities during the assigned shift.

The candidate will guide junior analysts, assist with investigations, remediation tracking, and improve CDC procedures, including training NOC engineers for Tier

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, CS, IT, or related field.
• 5+ years in Information Security, Security Operations, Incident Response, or risk management.
• Experience in SOC/CDC or similar cyber defense.
• Knowledge of SIEM, EDR, endpoint, identity, and cloud security tools.
• Familiarity with NIST, ISO 27001, CIS Controls, or similar.

Responsibilities

• Provide India first-shift CDC coverage for security monitoring and incident escalation.
• Monitor and analyze security alerts across SIEM, EDR, endpoints, cloud, and network security.
• Support incident response activities including detection, containment, and remediation tracking.
• Mentor junior analysts and train NOC engineers for Tier 1 triage procedures.
• Develop runbooks, playbooks, and guardrails to standardize NOC alert handling.

Skills

Information Security

Security Operations

Incident Response

Risk Management

Mentoring

Communication

Education

Bachelor's degree in Information Security/CS/IT

Tools

SIEM

EDR

Cloud Security Tools

Job description

Our vision for the future is based on the idea that transforming financial lives starts by giving our people the freedom to transform their own. We have a flexible work environment, and fluid career paths. We not only encourage but celebrate internal mobility. We also recognize the importance of purpose, well-being, and work-life balance. Within Empower and our communities, we work hard to create a welcoming and inclusive environment, and our associates dedicate thousands of hours to volunteering for causes that matter most to them. Chart your own path and grow your career while helping more customers achieve financial freedom. Empower Yourself.

Sr. Information Security Analyst: We are seeking a highly skilled Senior Information Security Analyst to support the Cyber Defense Center (CDC) on India first shift. This role is responsible for senior-level security monitoring, alert triage, incident response support, risk analysis, operational reporting, and coordination of daily CDC activities during the assigned shift. The Senior Information Security Analyst serves as an experienced individual contributor and first-shift technical resource within the CDC. This position provides guidance to junior analysts, supports investigation and escalation of security events, tracks remediation activities, improves operational procedures, and helps strengthen overall security operations. This role will also support operational maturity by training selected NOC engineers to perform Tier 1 security alert triage, including alert validation, initial documentation, escalation criteria, and handoff to the CDC.

Key Responsibilities

• Provide India first-shift CDC coverage for security monitoring, alert triage, investigation support, and incident escalation.
• Monitor and analyze security alerts, events, vulnerabilities, and potential threats across SIEM, EDR, endpoint, cloud, identity, and network security platforms.
• Review and validate security events to determine risk, business impact, urgency, and appropriate response actions.
• Support incident response activities, including detection, investigation, containment support, remediation tracking, and post-incident documentation.
• Serve as a senior escalation point for junior analysts during the assigned India first shift.
• Provide technical guidance and mentoring to junior analysts on alert review, investigation steps, escalation procedures, documentation, and CDC best practices.
• Train selected NOC engineers to perform Tier 1 security alert triage, including alert validation, enrichment, initial documentation, escalation criteria, and CDC handoff procedures.
• Develop and maintain T1 triage guidance, job aids, decision trees, and runbooks to support consistent NOC alert handling.
• Provide review, feedback, and escalation guidance for T1 alerts handled by NOC engineers to ensure quality, consistency, and proper escalation.
• Partner with NOC leadership and CDC leadership to improve alert intake, handoff consistency, and operational alignment.
• Track daily CDC activities, open investigations, escalations, remediation follow-up items, and shift-level operational priorities.
• Prepare and communicate operational updates, incident trends, risk findings, and status reports to security leadership and relevant stakeholders.
• Support shift handoff documentation to ensure continuity across CDC operations.
• Assist with developing, reviewing, and maintaining CDC procedures, playbooks, standards, escalation criteria, and operational documentation.
• Participate in security assessments, control reviews, audits, and compliance-related activities as needed.
• Support the operation and improvement of security tools and technologies, including SIEM, EDR, endpoint protection, vulnerability management, cloud security, and incident response platforms.
• Identify, assess, and help mitigate security risks across infrastructure, applications, endpoints, cloud environments, and business processes.
• Partner with IT, Engineering, Compliance, NOC, and business teams to support secure processes, remediation activities, alert handling, and security control adoption.
• Stay current on emerging threats, attack techniques, vulnerabilities, and security technologies to support proactive defense improvements.
• Assist with reporting on security metrics, incident trends, risk findings, control effectiveness, and CDC operational performance.

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field; equivalent experience may be considered.
• 5+ years of experience in Information Security, Security Operations, Incident Response, Risk Management, or a related cybersecurity role.
• Experience working in a SOC, CDC, or similar cyber defense environment.
• Strong understanding of security monitoring, alert triage, incident response, escalation procedures, and remediation tracking.
• Experience analyzing security events from tools such as SIEM, EDR, endpoint protection, identity platforms, network security tools, vulnerability scanners, or cloud security platforms.
• Working knowledge of security frameworks and control standards such as NIST, ISO 27001, CIS Controls, or similar.
• Working knowledge of cloud platforms such as AWS, Azure, or GCP and related cloud security concepts.
• Ability to assess risk, document findings, recommend remediation actions, and communicate security concerns clearly.
• Ability to train or coach technical team members on alert handling, documentation, escalation, and operational procedures.
• Strong problem-solving skills and the ability to manage multiple priorities during the assigned shift.
• Strong communication skills with the ability to work effectively with technical and non-technical stakeholders.

We are an equal opportunity employer with a commitment to diversity. All individuals, regardless of personal characteristics, are encouraged to apply. All qualified applicants will receive consideration for employment without regard to age, race, color, national origin, ancestry, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, religion, physical or mental disability, military or veteran status, genetic information, or any other status protected by applicable state or local law.

Want the latest money news and views shaping how we live, work and play? Stay in the know with The Currency and sign up for Empower’s free newsletter.

Remote and Hybrid Positions

For remote and hybrid positions you will be required to provide reliable high-speed internet with a wired connection as well as a place in your home to work with limited disruption. You must have reliable connectivity from an internet service provider that is fiber, cable or DSL internet. Other necessary computer equipment will be provided. You may be required to work in the office if you do not have an adequate homework environment and the required internet connection.

Follow Empower Facebook, LinkedIn, X, Instagram, & Glassdoor