Cybersecurity Analyst II

This is a fully remote position, open to applicants in India.

📋 Description

• Investigate and respond to sophisticated, escalated, or high-impact cybersecurity incidents within a 24/7 Security Operations Centre.

• Analyze security activities across various technology domains, correlate evidence, assess incident scope and potential impact, and assist in response and remediation efforts.

• Act as a technical escalation point for Security Analyst I during shifts and guide intricate investigations.

• Support a 24x7 Global Security Operations Centre by addressing security events and ensuring visibility across the active alert queue.

• Lead investigations and responses for higher-impact or complex security incidents.

• Evaluate the scope, severity, and potential business implications of suspicious activities.

• Suggest and coordinate containment, remediation, and escalation measures.

• Collaborate with incident response teams and relevant internal departments.

• Investigate and analyze EDR, NDR, and SIEM alerts.

• Formulate investigation hypotheses, create timelines, and identify affected users or systems.

• Document findings and prepare comprehensive reports.

• Review escalated investigations for thoroughness and accuracy and guide further investigative actions.

• Communicate technical findings, security risks, and necessary actions to stakeholders.

• Coordinate evidence collection, containment, remediation, and recovery operations.

• Provide structured handovers between shifts in the Security Operations Centre.

• Review and accept cases transitioned from previous shifts and maintain ownership until resolution, escalation, or handover.

• Contribute to security documentation, procedures, playbooks, and incident response strategies.

• Identify false positives, detection deficiencies, and operational inefficiencies, recommending process enhancements.

• Stay informed about emerging threats, vulnerabilities, and industry best practices.

• Engage in training and development programs.

⛳️ Requirements

• Minimum of 3 years of relevant experience in security operations, incident response, threat detection, or a similar cybersecurity role.

• Proven experience in independently investigating security incidents, managing escalations, and supporting incident response efforts.

• Previous experience in a 24x7 or shift-based Security Operations Centre environment is highly desirable.

• Equivalent practical experience may be considered if the required technical and investigative competency is clearly demonstrated.

• Experience in working with globally distributed teams and collaborating across diverse cultures, regions, functions, and time zones.

• Ability to effectively collaborate with Security, Engineering, Product, Infrastructure, GRC, Privacy, Legal, and other business stakeholders.

• Intermediate-level cybersecurity certifications such as AZ-500, CySA+, GSOC, or GCIA are advantageous.

• Strong analytical and problem-solving skills.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience demonstrating comparable knowledge and skills.

• Comprehensive understanding of cybersecurity principles, security monitoring, incident response, and security operations procedures.

• In-depth knowledge of common cybersecurity threats, vulnerabilities, attack techniques, and adversary behavior.

• Ability to independently analyze alerts, correlate evidence, and determine suitable response or escalation actions.

• Proficient written and verbal communication skills in English.

• Preferred: experience in proactive threat hunting or advanced threat analysis; roles such as Incident Coordinator, Incident Commander, or security incident lead; scripting or automation for security analysis; involvement in post-incident reviews, root-cause analysis, or lessons-learned activities; phishing investigations and advanced threat intelligence analysis; contributions to security playbooks, procedures, or process improvement initiatives.

🏝️ Benefits

• Training and development programs to enhance skills and knowledge.

• Public holidays, as applicable in relation to shift work.