Security Analyst

Incident Investigation & Response Own the full incident lifecycle during non-US hours — from initial triage through containment, remediation, and documentation Conduct in-depth investigation of security events across SIEM, EDR, email security, network, identity, and cloud platforms Perform root cause analysis on confirmed incidents and produce clear, actionable incident reports Escalate incidents to the Director of Security Operations with a clear situation summary and recommended course of action Provide detailed shift handoff notes to the US-based security analyst at transition, ensuring full continuity of open investigations Process & Documentation Develop, maintain, and improve incident response playbooks and SOC runbooks Maintain accurate and up-to-date documentation across all active and closed incidents Contribute to weekly and monthly SOC metrics, trend analysis, and reporting for the Director of Security Operations Identify opportunities to improve SOC processes, tooling, and automation and bring recommendations to the team Collaboration Work closely with the US-based security analyst and Director of Security Operations during shift overlap windows to align on priorities, open incidents, and ongoing investigations Serve as the primary security operations contact for any India-based stakeholders or teams during non-US hours Qualifications Bachelor's degree in Computer Science, Information Technology, Electronics, or a related field (B.E. / B.Tech / BCA / B.Sc. IT preferred) 4–6 years of experience in SOC or cybersecurity operations, with demonstrated experience performing both L2 investigation and L3 response duties Hands-on experience with SIEM platforms (Splunk, Microsoft Sentinel, IBM QRadar, or similar) Strong experience with EDR tools (CrowdStrike Falcon, Microsoft Defender, SentinelOne, or similar) Advanced log analysis skills across Windows, Linux, cloud (AWS, Azure, GCP), and identity platforms (Active Directory, Azure AD) Strong working knowledge of the MITRE ATT&CK framework Demonstrated ability to work independently, make sound decisions under pressure, and manage incidents end-to-end without real-time senior support Excellent written and verbal communication skills in English — including the ability to write clear incident reports, escalation summaries, and shift handoff notes for a global team Comfortable working non-US business hours Nice to Have Certifications: CompTIA CySA+, GCIH, GCFE, GCFA, SC-200, or equivalent Experience with SOAR platforms and alert automation or basic scripting (Python, PowerShell) for SOC workflow improvement Exposure to cloud security monitoring (AWS GuardDuty, Microsoft Defender for Cloud, Azure Sentinel, etc.)

operating in a small or lean security team with broad individual ownership Familiarity with GRC concepts and compliance frameworks (SOC 2, ISO 27001, NIST) to support cross-team collaboration Salary Range: ₹24,00,000 to ₹32,00,000 plus 10% bonus As a learning company we believe in the potential of everyone; if you don't have experience in all the details mentioned in this job post, then we still encourage you to apply and we'll get back to you as soon as we can. We are an equal opportunity workplace employer. We are committed to the values of Equal Employment Opportunity and provide accessibility accommodations to applicants with physical and/or mental disabilities. Applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability.