Senior Security Analyst

Position: Senior Security Analyst Experience: 4+ Years Work Mode: Hybrid/ Work From Office Location: Hyderabad Shift Timings: 24/7(rotational shifts including night shifts) Roles and Responsibilities: • Works as part of a Cyber Defense team that works 24/7 on rotational shifts. • Continuously monitor and respond to advanced threats and evolving attack vectors across multiple environments • Perform in-depth investigation and triage of security alerts to determine root cause, impact, and relevance.

• Correlate alerts and telemetry from SIEM and log sources like EDR, IPS, Firewall and threat intelligence platforms to identify real threats. • Handle detections targeting cloud infra/services/applications. • Provide recommendations for containment, mitigation, and recovery to client or internal response teams. • Contribute to the development and fine-tuning of detection rules, analytics, and use cases to enhance threat visibility and strength overall defense posture.

• Collaborate closely with Threat Intelligence, SOAR, and Engineering teams for enrichment and contextual analysis. • Document investigations, findings, and recommendations in accordance with SOC SOPs and reporting standards. • Serve as a subject matter expert on detection and response methodologies, including SIEM, SOAR, threat intelligence, log analysis, network and EDR telemetry, and other response techniques. • Develop and maintain accurate documentation which includes SOPs, playbooks, runbooks and SOC operational procedures.

• Mentor and guide junior analysts, foster a culture of continuous learning and operational excellence and ensure adherence to operational quality benchmarks and SLAs. Minimum Requirements: • 4+ years of experience in incident response, SOC Tier 2 or equivalent. • Strong understanding of adversary tradecraft (MITRE ATT&CK, Cyber Kill Chain, etc.). • Deep understanding of cloud security concepts. • Experience with EDRs, SIEMs, SOARs and log pipelines. • Solid grasp of Windows, Linux, and cloud security. • Familiarity with scripting languages for analysis.

• In-depth understanding of network protocols, endpoint artifacts, memory, and log analysis. • Excellent problem-solving and analytical thinking. • Ability to work under pressure during incidents and with minimal supervision. • Strong documentation and communication skills, especially when dealing with stakeholders. • Collaborative, yet capable of deep focus and individual contribution.

Preferred Education and Certifications: • Bachelor's degree or relevant qualification Cybersecurity, Information Technology, or a related field • Certifications: GCIH, GIAC, CEH, Microsoft Security Operations Analyst (SC-200), or equivalent.