Security Analyst II

This is a fully remote position, open to applicants in India.

📋 Description

• Serve as a senior member of the Security Operations Center, taking charge of and resolving security incidents from start to finish.

• Oversee incident investigations and conduct root cause analyses.

• Champion lessons learned and initiatives for continuous improvement.

• Collaborate with international security teams to enhance processes, tools, and operational best practices.

• Evaluate intricate security logs, SIEM alerts, and correlated data to identify, assess, and address threats.

• Maintain and improve security tools, including SIEM use cases and detection logic informed by threat intelligence.

• Identify risks, security vulnerabilities, and opportunities to bolster the organization’s security stance.

• Participate in 24/7 SOC monitoring, detection, and response operations.

• Mentor junior analysts and cultivate a collaborative team environment.

⛳️ Requirements

• Minimum of 4 years of experience in Information Security or related cybersecurity positions.

• Practical experience in a Security Operations Center (SOC).

• Strong familiarity with SIEM, endpoint, and network security technologies.

• At least 2 years of experience working with cloud environments and cloud-native security tools.

• Experience with SOAR platforms and scripting languages such as Python, PowerShell, or Bash is a plus.

• Proficient knowledge of Linux systems, including command-line syslog analysis.

• Solid understanding of cloud security principles, encompassing access control, data protection, threat detection, and compliance monitoring.

• Capability to perform root cause analyses and implement risk mitigation strategies.

• Strong analytical skills and problem-solving abilities.

• Excellent communication skills for interacting with technical and non-technical stakeholders across various time zones.

• High attention to detail, a sense of ownership, and a commitment to continuous improvement.

• Ability to maintain composure under pressure and manage incidents systematically.

• Familiarity with tools such as Azure Sentinel, QRadar, Splunk, Cisco IDS/IPS, Palo Alto, McAfee Security Suite, Tenable Nessus, ForeScout, and Cisco ISE.

• Comfortable using query languages such as KQL or SQL is an advantage.

• Operational knowledge of APIs is advantageous.

• Bachelor’s degree in Computer Information Systems, Cybersecurity, or a related field, or equivalent experience.

• Certifications such as CompTIA Security+ CE, CEH, ECSA, ECIH, CompTIA CySA+, SC-200 or relevant cloud security certifications, Cisco CCNA/CCNP + Security, ITIL Foundation, and Linux+ are considered strong assets.

• CISSP or CISSP-ISSEP, SSCP, and MCSE certifications are desirable.

• Must be available to work rotating shifts in a 24x7 operational environment, including night shifts, according to Indian Standard Time (IST).

🏝️ Benefits

• Competitive compensation package.

• Comprehensive group benefits for employees and their families.

• Flexibility in work arrangements.

• Time off as needed.

• Casual work environment.