Sr IT Cyber Defense Analyst

Harris Computer; Pune District; Hybrid; INR 900,000 - 1,300,000; Full time

Job summary

Harris Computer is seeking a Senior IT Cyber Defense Analyst (Shift Lead) to drive day-to-day SOC operations, oversee investigations, and mentor analysts. You will leverage SIEM/EDR, and AI/LLM tools to improve detection and response.

This remote role supports Pune/Baroda, India with 24/7 rotational shifts. Requires a 5+ year track record, Bachelor’s in a related field, and proficiency in Sentinel, KQL, Defender or CrowdStrike.

Qualifications

• Minimum 5+ years in SOC, cyber defense, or incident response with leadership experience.
• Hands-on SIEM/EDR/XDR, incident investigation, and threat detection expertise.
• Proficient with Microsoft Sentinel and KQL; familiarity with Defender/CrowdStrike.
• Strong networking, Windows/Linux, identity security, and MITRE ATT&CK knowledge.
• Practical AI/LLM skills, including prompt engineering and validation of outputs.

Responsibilities

• Lead SOC shift operations, prioritize alerts, and manage escalations.
• Investigate complex incidents across phishing, malware, ransomware, and more.
• Conduct threat hunting and map attacker behavior to MITRE ATT&CK.
• Develop and optimize SIEM queries and detection use cases.
• Utilize AI/LLM tools for triage, enrichment, and automation; validate results.
• Mentor SOC analysts and coordinate with Incident Response, IT, and security teams.

Skills

SOC leadership

Incident investigation

Threat detection

AI/LLM proficiency

Python scripting

PowerShell scripting

Mentoring teammates

Education

Bachelor's degree in Cybersecurity / IT / CS

Tools

Microsoft Sentinel

KQL

Microsoft Defender

CrowdStrike

Job description

Senior IT Cyber Defense Analyst (Shift Lead) AI-Enabled Security Operations | 24/7 SOC Location: Remote – Pune/Baroda, India Department: IT Cybersecurity – Security Operations Center (SOC) Reports To: SOC Manager Work Schedule: 24/7 rotational shifts

About the Role

We are seeking an experienced Senior IT Cyber Defense Analyst (Shift Lead) to lead day-to-day SOC operations, oversee security investigations, coordinate incident response, and mentor SOC analysts. The ideal candidate will bring strong SIEM/EDR expertise, advanced threat investigation skills, and hands-on experience using AI/LLM tools and automation to improve SOC efficiency and detection capabilities.

Key Responsibilities

• Lead SOC shift operations, prioritize alerts, manage escalations, and ensure timely handovers and SLA adherence.
• Investigate complex incidents involving phishing, malware, ransomware, compromised accounts, endpoint threats, and suspicious network activity.
• Conduct threat hunting, correlate security telemetry, and map attacker behavior to the MITRE ATT&CK framework.
• Develop, optimize, and troubleshoot SIEM queries, analytics rules, and detection use cases using Microsoft Sentinel and KQL.
• Use approved AI/LLM tools for alert triage, investigation assistance, threat intelligence enrichment, KQL development, incident reporting, and workflow automation; independently validate AI-generated outputs.
• Automate repetitive SOC tasks using Python, PowerShell, APIs, or SOAR capabilities.
• Mentor analysts, improve investigation quality, reduce false positives, and maintain accurate incident documentation and audit-ready evidence.
• Coordinate with Incident Response, IT, Endpoint, Network, and Cloud teams to support containment, remediation, and recovery.

Required Skills and Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.
• 5+ years of experience in SOC, cyber defense, or incident response, including shift leadership, incident coordination, or analyst mentoring.
• Strong hands-on experience with SIEM, EDR/XDR, incident investigation, and threat detection.
• Proficiency in Microsoft Sentinel and KQL; experience with Microsoft Defender, CrowdStrike, or similar security platforms.
• Strong understanding of networking, Windows/Linux, identity security, email threats, and MITRE ATT&CK.
• Mandatory practical AI/LLM proficiency, including prompt engineering, AI-assisted investigations, validation of AI-generated queries/scripts, and awareness of hallucinations, prompt injection, and data privacy risks.
• Scripting or automation experience using Python, PowerShell, APIs, or SOAR tools.
• Strong analytical, communication, decision-making, and team leadership skills; willingness to work in a 24/7 rotational shift environment.

Preferred Qualifications

• Certifications such as Microsoft SC-200, CompTIA CySA+, GCIH, or relevant SIEM/EDR vendor certifications.
• Experience in proactive threat hunting, detection engineering, cloud security, and SOC process improvement.

What Success Looks Like

• Effective shift leadership and timely, high-quality incident handling.
• Improved detection coverage, investigation efficiency, and reduced false positives.
• Practical adoption of AI and automation to reduce repetitive work while maintaining security, accuracy, and human oversight.
• Strong analyst development, documentation, and operational consistency.

At Harris, we believe great people build great software. We offer an environment where employees are empowered to make a real impact, grow their skills, and shape their careers. Our teams enjoy a supportive, award-winning culture, a casual and collaborative workplace, and opportunities to learn from a diverse group of businesses and industries. We are financially strong and proudly part of Constellation Software Inc. (CSI), the largest software company in Canada, providing long-term stability alongside entrepreneurial autonomy. In addition to a competitive compensation and benefits package, we offer meaningful perks, flexibility, and, most importantly, a culture that values people, curiosity, and having fun while doing great work.

Follow us on LinkedIn to learn more about our culture, values, and career opportunities.

Harris is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Applicants who require a reasonable accommodation due to a disability may contact us by email at [e-mail]. Accommodation requests may be made at any time. This email address is dedicated solely to accommodation requests and cannot be used to inquire about application status.

Know Your Rights Poster EO 13496: Notification of Employee Rights under Federal Labor Laws Our commitment to fair and equitable hiring.

As part of our recruitment process, we use artificial intelligence (AI) tools during the initial screening phase to help identify candidates whose qualifications most closely align with the requirements of the role. This technology supports efficiency and consistency in the early stages, but it never replaces human judgement. All subsequent evaluations and final hiring decisions are made by our recruitment professionals. AI does not make final hiring decisions.