Lead Cybersecurity Analyst

Good co India; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Good co India is seeking an experienced cybersecurity professional to lead operations across the security lifecycle. You will oversee threat monitoring, incident response and vulnerability management, coordinating with IT, DevOps and business teams to implement best practices.

A strong background in SIEM, EDR/XDR and cloud security is essential. The role requires hands-on security engineering, policy development and effective communication with senior management.

Qualifications

• Bachelor's degree or higher in a technical field such as CS/IT/Cybersecurity.
• 5–10 years of cybersecurity, SOC operations or security engineering experience.
• Proven leadership in security initiatives, operations and incident response.
• Strong knowledge of network, cloud, application security, and vulnerability management.
• Hands-on with SIEM platforms (Splunk/QRadar/Sentinel).
• Familiarity with EDR/XDR, IDS/IPS, firewalls and threat intel tools.
• Experience with vulnerability assessments, pen testing and risk analysis.
• Understanding of ISO 27001, NIST, MITRE ATT&CK, CIS Controls.
• Cloud security across AWS/Azure/Google Cloud.
• Scripting in Python/PowerShell/Bash for automation.
• Certifications such as CISSP/CISM/CISA/CEH/CCSP are a plus.
• Excellent analytical, leadership and communication skills.

Responsibilities

• Lead cybersecurity operations to protect IT infrastructure, networks, apps and data.
• Monitor security systems, detect threats and investigate incidents and vulnerabilities.
• Perform vulnerability assessments, pen tests and security audits.
• Oversee SOC activities: threat monitoring, detection, analysis and response.
• Develop security policies, standards and risk management frameworks.
• Manage SIEM/EDR/XDR/IDS-IPS and other monitoring tools.
• Conduct threat intelligence analysis and proactive threat hunting.
• Coordinate incident response and root-cause analysis.
• Assess network, endpoint, cloud and app security; strengthen IAM/Zero Trust.
• Ensure compliance with ISO 27001, NIST, GDPR and other regulations.
• Collaborate with IT, DevOps and business teams on security best practices.
• Prepare risk dashboards and reports for senior management.
• Drive security awareness and training across the organization.
• Mentor cybersecurity analysts and track performance metrics.
• Evaluate new security technologies to improve posture.

Skills

Lead cybersecurity operations

Threat hunting

Incident response

Vulnerability management

Cloud security

SIEM (Splunk QRadar Sentinel)

Networking security

Python/PowerShell scripting

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

Splunk

IBM QRadar

Microsoft Sentinel

EDR/XDR

Job description

Role & responsibilities

• Lead cybersecurity operations, ensuring the protection of organisational IT infrastructure, networks, applications and sensitive data.
• Monitor security systems, identify potential threats and investigate suspicious activities, vulnerabilities and security incidents.
• Conduct regular vulnerability assessments, penetration testing and security audits to identify and mitigate risks.
• Lead Security Operations Centre (SOC) activities, including threat monitoring, detection, analysis and incident response.
• Develop and implement cybersecurity policies, procedures, standards and risk management frameworks.
• Manage SIEM, EDR, XDR, IDS/IPS and other security monitoring and threat detection solutions.
• Conduct threat intelligence analysis, threat hunting and security investigations to proactively identify emerging cyber threats.
• Lead incident response activities, perform root cause analysis and coordinate remediation efforts.
• Assess and strengthen network security, endpoint protection, cloud security and application security.
• Ensure compliance with security standards and regulatory frameworks such as ISO 27001, NIST, GDPR and applicable industry regulations.
• Collaborate with IT, infrastructure, DevOps, compliance and business teams to implement security best practices.
• Prepare security assessment reports, risk dashboards and recommendations for senior management.
• Drive security awareness and training programmes across the organisation.
• Lead and mentor cybersecurity analysts, coordinate team activities and establish performance metrics.
• Evaluate emerging cybersecurity technologies and continuously improve the organisation's security posture.

Preferred candidate profile

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security or a related technical discipline; Master's degree preferred.
• 5 to 10 years of relevant experience in cybersecurity, information security, SOC operations or security engineering.
• Proven experience leading cybersecurity initiatives, security operations and incident response activities.
• Strong understanding of network security, application security, cloud security, endpoint protection and vulnerability management.
• Hands-on experience with SIEM platforms such as Splunk, IBM QRadar or Microsoft Sentinel.
• Knowledge of EDR/XDR solutions, IDS/IPS, firewalls, threat intelligence and security monitoring tools.
• Experience in vulnerability assessment, penetration testing, ethical hacking and security risk analysis.
• Strong understanding of security frameworks such as ISO 27001, NIST, MITRE ATT&CK and CIS Controls.
• Knowledge of cloud security across AWS, Microsoft Azure and Google Cloud Platform.
• Proficiency in scripting languages such as Python, PowerShell or Bash for security automation.
• Experience in digital forensics, malware analysis, threat hunting and root cause analysis.
• Understanding of identity and access management (IAM), Zero Trust Architecture and data protection practices.
• Relevant certifications such as CISSP, CISM, CISA, CEH, CompTIA Security+ or CCSP are an added advantage.
• Excellent analytical, leadership, communication and problem-solving skills.
• Ability to manage security teams, coordinate incident response and communicate technical risks to business stakeholders.