Sr. Security Operations Analyst

Smarsh; Bengaluru; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Smarsh is looking for a Senior Security Operations Analyst in Bengaluru, India. This expert-level role is critical in handling complex security incidents within the Security Operations Center (SOC). The Analyst will conduct advanced threat research and incident response, ensuring the organization's security posture is robust.

The successful candidate will have over 8 years of cybersecurity experience and be proficient in security tools and threat analysis methodologies. Join Smarsh and be part of a culture that values collaboration and innovation.

Qualifications

• 8+ years of experience in cybersecurity, significantly in security operations.
• Expert knowledge of advanced cyber and cloud threats and attack methodologies.
• Strong expertise in incident response and malware analysis.

Responsibilities

• Research on new threats and identify indicators of compromise.
• End-to-end security incident triage and remediation.
• Document decisions regarding technology choices and best practices.

Skills

Advanced cyber and cloud threats

Incident response

Threat hunting

Malware analysis

Documentation creation

Collaboration

Education

Professional degree in Computer Science

Tools

SIEM

XDR

IDS/IPS

Forensic tools

Threat intelligence platforms

AWS

Azure

Google Cloud

Job description

Who are we?

Smarsh empowers its customers to manage risk and unleash intelligence in their digital communications. Our growing community of over 6500 organizations in regulated industries counts on Smarsh every day to help them spot compliance, legal or reputational risks in 80+ communication channels before those risks become regulatory fines or headlines. Relentless innovation has fueled our journey to consistent leadership recognition from analysts like Gartner and Forrester, and our sustained, aggressive growth has landed Smarsh in the annual Inc. 5000 list of fastest-growing American companies since 2008.

About The Team

The Senior Security Operations Analyst is an expert‑level role in the Security Operations Center (SOC), responsible for handling the most complex and critical security incidents. This role involves advanced threat analysis, incident response, and proactive threat hunting. The Senior Security Operations Analyst also contributes to the strategic improvement of the organization’s security posture.

Roles And Responsibilities

• Threat Research – research on new ATPs, threats, identifying the new indicators of compromise (IOCs), tactics, techniques and procedures (TTPs).
• Responsible for end‑to‑end security incident triage, working with respective teams to provide contextual information for security incident remediation.
• Recommend fine‑tuning and configuration changes to security platforms that improve detection accuracy and reduce false positives.
• Experience in creation and integration of playbooks and custom parsers for SOC tools.
• Develop and maintain incident‑response playbooks and continuous service improvements.
• Analyse monthly security reports from the platforms and vendors to identify trends and vulnerabilities within the infrastructure.
• Conduct computer and network forensic investigation functions and malware analysis to determine the target.
• Coordinate efforts with globally dispersed teams.
• Document decisions regarding technology choices, best practices and process.
• Contribute to architectural conversations and plans.
• Collaborate with engineers and development teams to integrate security practices into the CI/CD pipeline and automate security processes.
• 24x5 rotational shift (Hybrid) and on‑call rotational responsibility during weekends.
• Subject‑matter expert in security audits and compliance assessments to ensure adherence to industry regulations (e.g., GDPR, HIPAA, SOC, ISO) and internal security requirements.
• Lead the creation of comprehensive security documentation and training materials for both technical and non‑technical audiences.
• Lead collaborations with developers and engineers to simulate realistic cyber‑attack scenarios aimed at identifying vulnerabilities in the applications and infrastructure.
• Provide oversight of third‑party Security Operations Center (SOC) and second‑level incident investigation and triage.
• Mentor and guide junior security engineers, fostering their technical growth and professional development.
• Take lead to create documentation and training materials for Security Operations.

Education & Experience

• Professional degree or equivalent education in Computer Science with a consistent academic record.
• 8+ years of experience in cybersecurity, with significant time spent in security operations.
• Expert knowledge of advanced cyber and cloud threats, attack methodologies and countermeasures.
• Proficiency in SIEM, XDR, IDS/IPS, CSPM, forensic tools and threat intelligence platforms.
• Hands‑on experience in security systems, including EDR, firewalls, intrusion detection systems, anti‑virus software, authentication systems, log management and content filtering.
• Strong expertise in incident response, threat hunting and malware analysis.
• Ability to discuss and articulate security frameworks (MITRE, NIST), technologies and best practices.
• Support Security Analysts by providing additional subject‑matter expertise.
• Proven experience with SIEM, EDR, IDS/IPS, network forensic tools and external exposure management tools.
• Experience handling security events, incidents, breaches and zero days.
• Exhibit good judgement in managing workload, including when to communicate project risks.
• In‑depth understanding of cybersecurity and cloud principles, practices and methodologies.
• Familiarity with common cyber threats, attack vectors and vulnerabilities.
• Experience securing cloud environments such as AWS, Azure or Google Cloud.
• Proficient with incident‑response procedures, documentation and best practices.
• Knowledge of cryptographic protocols and key management.
• Proficiency in LLM and security orchestration, scripting languages such as Python and PowerShell to automate security tasks.
• Dedication to staying updated with the latest security trends, tools and techniques.
• Proficiency in creating clear and comprehensive security documentation, reports and procedures.
• Familiarity with relevant regulations (GDPR, HIPAA, etc.) and industry standards (ISO 27001, NIST).
• Excellent verbal and written English skills to collaborate with cross‑functional teams and convey security concepts to non‑technical stakeholders.
• Experience with common security tools such as Burp/ZAP, Nessus, Kali Linux, etc.
• Experience with threat modelling and vulnerability management tools.
• Security certifications such as GCIH, GCIA, CASP or GCFA.

About Our Culture

Smarsh hires lifelong learners with a passion for innovating with purpose, humility and humor. Collaboration is at the heart of everything we do. We work closely with the most popular communications platforms and the world’s leading cloud infrastructure platforms. We use the latest in AI/ML technology to help our customers break new ground at scale. We are a global organization that values diversity, and we believe that providing opportunities for everyone to be their authentic self is key to our success. Smarsh leadership, culture, and commitment to developing our people have all garnered Comparably.com Best Places to Work awards. Come join us and find out what the best work of your career looks like.