Tier 2 Cybersecurity Operations Analyst

teladoc; India; On-site; INR 1,000,000 - 1,600,000; Full time

Job summary

Teladoc Health is seeking a Tier 2 Cyber Security Operations Analyst to analyze security incidents, lead investigations, and implement mitigations in a fast-paced SOC environment.

The role serves as an escalation point for Tier 1 analysts and requires strong technical expertise, incident response experience, and cross-functional collaboration to protect IT infrastructure and data.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Certifications or equivalent experience may substitute.
• 4-7 years of experience in cybersecurity, preferably in a SOC environment or as a Tier 1 analyst. Hands-on incident response experience essential.
• Advanced knowledge of networking protocols (TCP/IP, DNS, VPN) and operating systems (Windows, Linux, macOS).
• Proficiency with SIEM platforms, EDR/XDR tools, and network security appliances; scripting in Python/PowerShell/Bash for automation.
• Familiarity with cloud security (AWS, Azure, Google Cloud) and MITRE ATT&CK framework; CVE knowledge.
• Certifications (preferred): CompTIA Security+, CISSP; CEH; GIAC certifications.
• Strong problem-solving, communication, and leadership abilities; ability to work under pressure and handle multiple incidents.
• Clear documentation and ability to explain technical findings to non-technical stakeholders.

Responsibilities

• Investigate escalated security incidents from Tier 1, including malware, APTs, phishing, and unauthorized access.
• Perform root-cause analysis to identify source, scope, and impact; implement containment, eradication and recovery.
• Proactively hunt threats using SIEM/EDR/XDR; analyze IoCs and TTPs to identify potential threats.
• Develop and tune SIEM rules, dashboards, and alerts to improve detection accuracy.
• Document incident details and remediation steps; prepare incident reports and post-incident reviews.
• Mentor Tier 1 analysts; collaborate with threat intelligence, IT, and external stakeholders during major incidents.

Skills

SIEM platforms

EDR/XDR tools

Threat analysis

Incident response

Python scripting

Communication

Leadership

Education

Bachelor's degree in CS/IT/Cybersecurity

Certifications (preferred): Security+, CISSP, CEH, GCIH

Tools

Wireshark

Windows

Linux

Cloud platforms (AWS/Azure/GC)

Job description

Join the team leading the next evolution of virtual care.

At Teladoc Health, you are empowered to bring your true self to work while helping millions of people live their healthiest lives.

Here you will be part of a high-performance culture where colleagues embrace challenges, drive transformative solutions, and create opportunities for growth. Together, we're transforming how better health happens.

Job Description

Summary of Position

The Tier 2 Cyber Security Operations Analyst is responsible for performing advanced analysis of security incidents, conducting in-depth investigations, and implementing mitigation strategies to protect organizational IT infrastructure. This role serves as an escalation point for Tier 1 analysts, requiring strong technical expertise, analytical skills, and the ability to handle complex cyber threats in a fast-paced SOC environment.

Key Responsibilities:

1. Incident Analysis and Response:

   Investigate escalated security incidents from Tier 1, including malware infections, advanced persistent threats (APTs), phishing campaigns, and unauthorized access attempts.

   Perform root cause analysis to identify the source, scope, and impact of incidents.

   Implement containment, eradication, and recovery measures, such as isolating compromised systems or applying security patches.

2. Threat Hunting and Proactive Monitoring:

   Conduct proactive threat hunting using SIEM tools and endpoint detection and response (EDR/XDR) platforms.

   Analyze Indicators of Compromise (IoCs) and Tactics, Techniques, and Procedures (TTPs) to identify potential threats.

   Correlate logs and alerts to detect patterns of malicious activity.

3. Security Tool Optimization:

   Configure and fine-tune security tools, including SIEM and SOAR platform.

   Develop and update SIEM rules, dashboards, and alerts to improve detection accuracy.

4. Documentation and Reporting:

   Document incident details, including timelines, findings, and remediation steps, in ticketing systems.

   Prepare detailed incident reports and post-incident reviews for management and compliance purposes.

   Contribute to the development of standard operating procedures (SOPs) and playbooks for incident response.

5. Collaboration and Escalation:

   Work closely with Tier 1 analysts to mentor and guide them on alert triage and basic incident handling.

   Collaborate with Senior Analysts, threat intelligence teams, and IT departments for advanced investigations and remediation.

   Liaise with external stakeholders, such as CERT-In or third-party vendors, during major incidents.

6. Threat Intelligence Integration:

   Incorporate threat intelligence feeds into security monitoring processes.

   Stay updated on emerging cyber threats, vulnerabilities, and attack trends relevant to the organization's industry.

Skills and Qualifications:

Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Relevant certifications or equivalent experience may substitute.

Experience: 4-7 years of experience in cybersecurity, preferably in a SOC environment or as a Tier 1 analyst. Hands-on experience with incident response is essential.

Technical Skills: Advanced knowledge of networking protocols (TCP/IP, DNS, VPN) and operating systems (Windows, Linux, macOS). Proficiency with SIEM platforms, EDR/XDR tools, and network security appliances. Experience with log analysis, packet capture tools (e.g., Wireshark), and scripting (e.g., Python, PowerShell, Bash) for automation. Familiarity with cloud security (e.g., AWS, Azure, Google Cloud) and related tools is a plus. Understanding of attack frameworks like MITRE ATT&CK and common vulnerabilities (e.g., CVE database).

Certifications (preferred): CompTIA Security+, CISSP

Certified Ethical Hacker (CEH)

GIAC Certified Incident Handler (GCIH)

Strong problem-solving and critical-thinking skills.

Ability to work under pressure and handle multiple incidents simultaneously.

Excellent communication skills to explain technical findings to non-technical stakeholders.

Team mentoring and leadership capabilities.

As part of our hiring process, we verify identity and credentials, conduct interviews (live or video), and screen for fraud or misrepresentation. Applicants who falsify information will be disqualified.

Why join Teladoc Health?

Teladoc Health is transforming how better health happens. Learn how when you join us in pursuit of our impactful mission .

Chart your career path with meaningful opportunities that empower you to grow, lead, and make a difference.

Join a multi-faceted community that celebrates each colleague's unique perspective and is focused on continually improving, each and every day.

Contribute to an innovative culture where fresh ideas are valued as we increase access to care in new ways.

Enjoy an inclusive benefits program centered around you and your family, with tailored programs that address your unique needs.

Explore candidate resources with tips and tricks from