Associate Security Analyst

Overview

Join Bloomreach's Global Information Security and Technology (GIST) team as an Associate Security Analyst, a core member of a globally distributed 24/7 Security Operations Team protecting the e-commerce environment from threats, vulnerabilities and sophisticated attackers.

What you'll do

• Monitor, analyze and interpret security, system, application and infrastructure logs for events, configuration irregularities and potential incidents.
• Leverage security tools, custom-built dashboards and proactive identification approaches to detect anomalous activities.
• Monitor cloud infrastructure for security-related events.
• Monitor the threat and vulnerability landscape and security advisories, coordinating and escalating as appropriate.
• Work with application security teams, product specialists, GRC and legal teams on active incidents and investigations.
• Participate in major incident calls and document incident report summaries.
• Document, follow and execute standard operating procedures (SOPs).
• Document, manage and maintain use cases, playbooks and knowledge base articles.
• Work on security incidents and requests.
• Own responsibilities within a shift with a positive mindset towards growth and upskilling.

What you'll need

• 2+ years of hands-on experience as part of a 24x7 Security Operations team, OR a starter with an equivalent degree or specialization in cybersecurity with a proven project dealing with new-age landscape areas (SaaS platform security, SecOps, API/container security, threat intel/hunting, vulnerability management).
• Hands-on experience or deep knowledge of SIEM, SOAR and EDR usage (modules such as TI, VM, DLP).
• Exposure to or experience with any CSPM tools (SentinelOne, Falcon Horizon, Wiz, Sysdig, Prisma Cloud, MS Defender).
• Exposure to or experience in assessing, interpreting and managing vulnerabilities using relevant tools.
• Knowledge of AWS or GCP is mandatory.
• Positive attitude to participate in, own and drive tasks for POCs for various tools.
• Understanding of risk frameworks.
• Ability to assess emerging trends and threats in the cybersecurity space.
• Good analytical, problem-solving and interpersonal skills, with the ability to apply and provide logical reasoning.
• Beginner-level understanding of NIST framework, OSINT standards, MITRE ATT&CK framework and the cybersecurity incident lifecycle is mandatory.
• Willingness to work mandatory 24/7 rotation shifts and weekends.
• Excellent command of English communication, being a good listener, speaker and reader.

Nice to have

• Knowledge of NIST framework, OSINT standards, MITRE ATT&CK framework and cybersecurity incident lifecycle is an advantage.

Details

• Location: India (full-time, from Bloomreach's India offices or from home).
• Work schedule: 24/7 rotation shifts, including weekends.