Security Operations Analyst

The Security Operations Analyst is responsible for monitoring, analyzing, and responding to security events and incidents across the organization.

This role plays a key part in protecting enterprise assets by identifying threats, investigating suspicious activity, and executing response actions in collaboration with SOC, IT, and engineering teams.

The ideal candidate is analytical, detail-oriented, and passionate about cybersecurity operations.

• Monitor SIEM, EDR, NDR, IAM, and cloud security platforms for suspicious activity.
• Triage alerts to determine severity, scope, and potential impact.
• Correlate events across tools to identify indicators of compromise (IOCs).
• Document findings and escalate incidents as required.

I ncident Response

• Execute initial containment and remediation actions based on runbooks.
• Gather evidence: logs, network traffic, system data, threat intel.
• Assist in root cause analysis and post-incident reviews.
• Coordinate with Security Engineers, IT, and application teams during incidents.

• Assist in tuning detection rules to reduce false positives.
• Conduct periodic threat hunts based on emerging threats or MITRE ATT&CK frameworks.
• Identify gaps in visibility and recommend improvements.

• Review threat intel feeds and correlate with internal telemetry.
• Update IOCs, detection signatures, and enrichment sources.
• Track trends, threat actor tactics, and industry-specific risks.

• Support maintenance of SIEM, SOAR, EDR, and cloud security tools.
• Validate log ingestion and data quality across security platforms.
• Collaborate on automation opportunities to reduce analyst workload.

• Maintain accurate incident tickets, timelines, and reporting metrics.
• Update runbooks, playbooks, and knowledge base articles.
• Prepare summaries for leadership on major incidents and trends.
• Weekly and Monthly reports

• Experience with SIEM technologies (Splunk, Sentinel, Elastic, QRadar, etc.).
• Knowledge of endpoint protection/EDR tools (CrowdStrike, Defender, SentinelOne).
• Familiarity with cloud platforms (AWS) and their security controls.
• Understanding of networking, TCP/IP, DNS, firewalls, and proxy logs.
• Ability to analyze logs, correlate events, and investigate anomalies.
• Ability to create policies / Use Cases

• Understanding of common attack techniques (MITRE ATT&CK).
• Knowledge of malware behavior, phishing, identity-based attacks, and lateral movement.
• Awareness of security frameworks (NIST CSF, ISO 27001).

• Strong communication and documentation abilities.
• Ability to work in fast-paced, high-pressure environments.
• Analytical mindset with strong attention to detail.
• Team-oriented with a willingness to learn and grow.

• Security certifications: Security+, CySA+, GSEC, CEH, GCIA, or similar.
• Experience in a 24×7 SOC.
• Scripting/automation skills (Python, PowerShell, Bash).

As a full-time employee with Securonix, you will be eligible for the following employee benefits:

• Health Insurance with a total sum insured is INR 7,50,000
• Coverage: Self, Spouse, 2 kids, Dependent parents, or parents-in-law
• Personal Accident with total sum insured is INR 10,00,000
• Term Life Insurance with a sum assured for employees is 5 times fixed base pay is covered.

Securonix provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, amnesty or status as a covered veteran in accordance with applicable federal, state and local laws. Securonix complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including hiring, placement, promotion, termination, layoff, recall, and transfer, leaves of absence, compensation and training.

Securonix expressly prohibits any form of unlawful employee harassment based on race, color, religion, gender, sexual orientation, national origin, age, genetic information, disability or veteran status.

Improper interference with the ability of Securonix employees to perform their expected job duties is absolutely not tolerated.