Cyber Security Analyst

Role: Senior Cyber Security Analyst
Department: Information Security / Cybersecurity / SOC
Location: PUNE

Reports To: Cyber Security Manager

Job Summary:
We are seeking an experienced Senior Cyber Security Analyst Incident Responder to join our Security Operations Center (SOC). This role is critical for leading and coordinating the detection, response, and mitigation of cyber threats. The ideal candidate will have a strong background in cyber threat analysis, digital forensics, and incident response methodologies.
Key Responsibilities:

• Lead cyber security incident investigations from detection through resolution.
• Analyse and respond to alerts from SIEM, IDS/IPS, EDR, and other security tools.
• Perform root cause analysis and forensic investigations (host, network, and memory).
• Develop incident response playbooks and lead tabletop exercises.
• Collaborate with IT, legal, compliance, and other stakeholders during incident response.
• Provide detailed documentation and reporting of incidents, including lessons learned.
• Maintain and enhance incident response and forensic capabilities.
• Monitor threat intelligence feeds and assess risks relevant to the organization.
• Mentor junior analysts and contribute to the development of team capabilities.

Required Qualifications:

• Bachelors degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent experience).
• 5+ years of experience in a security operation, incident response, or threat hunting role.
• Strong understanding of security technologies: SIEM, IDS/IPS, EDR, firewalls, etc.
• Proficiency with incident response tools (e.g., EnCase, FTK, Volatility, Wireshark).
• Knowledge of MITRE ATT&CK framework, NIST 800-61, and other industry standards.
• Experience handling APTs, ransomware, phishing, and insider threats.
• Excellent communication skills and ability to convey complex technical issues to non-technical stakeholders.

Preferred Qualifications and Certifications:

• Relevant certifications such as GCIA, GCIH, GNFA, GCFA, CISSP, or CISM.
• Experience in cloud security incident response (AWS, Azure, GCP).
• Scripting skills (Python, PowerShell, Bash) for automation and analysis.
• Familiarity with threat intelligence platforms and threat hunting practices.