IT Security Analyst

This is a fully remote position, open to applicants in India, +1 more country.

📋 Description

• Safeguard the organization's information assets by enhancing and managing security controls.

• Oversee, categorize, and resolve alerts in Microsoft Defender XDR and Sentinel.

• Adjust detections to minimize false positives and enhance response efficiency.

• Guide security incidents from start to finish, encompassing containment, eradication, recovery, and lessons learned.

• Update and maintain the Incident Response Plan and associated playbooks.

• Keep the ISMS policies, risk register, and audit documentation current.

• Assist with internal and external audits, ensuring findings are addressed.

• Manage Entra ID, including Conditional Access and Multi-Factor Authentication (MFA).

• Conduct quarterly reviews of user and privileged access, enforcing the principle of least privilege.

• Operate the Privileged Access Management solution, including Privileged Identity Management (PIM) and break-glass accounts.

• Oversee vulnerability remediation and the monthly patching cycle.

• Report on patch compliance in relation to Service Level Agreements (SLAs).

• Manage security licenses and Sentinel log ingestion to optimize costs while maintaining coverage.

⛳️ Requirements

• 1–3 years of experience in a security operations or security analyst position.

• Practical experience with Microsoft Defender XDR, Sentinel, and Entra ID.

• Proven experience in managing security incidents and generating incident reports.

• Familiarity with ISO 27001 controls and auditing processes.

• Experience with Identity and Access Management (IAM), access reviews, Privileged Access Management (PAM), and patch management.

• Proficient in KQL and either PowerShell or Python.

• Excellent communication skills, capable of engaging with both technical and non-technical stakeholders.

🏝️ Benefits

• Flexibility to deliver work in a manner that suits you and your team.

• Access to tools, resources, and development opportunities for continuous capability enhancement over time.