Cybersecurity Analyst I

Overview

Security Analyst I role within the Security Operations Centre (SOC), monitoring security activity, investigating alerts, performing initial incident triage, and supporting response to potential security incidents. The position operates within a 24/7 SOC.

What you'll do

• Regularly monitor security alerts and events, conduct initial analysis, and respond to potential security incidents.
• Assist in the initial triage of security incidents, escalating to higher-level analysts when necessary.
• Collaborate with the incident response team to implement response plans and mitigate security threats.
• Investigate and analyse alerts generated by security tools (EDR, NDR, SIEM) to identify potential security incidents.
• Document investigation findings and provide detailed reports for further analysis.
• Provide structured handovers of ongoing investigations between SOC shifts.
• Review and accept cases transferred from previous shifts.
• Maintain appropriate ownership of investigations until resolution, escalation, or formal handover.
• Contribute to the development and maintenance of security documentation, procedures, and incident response plans.
• Stay current with emerging threats, vulnerabilities, and industry best practices.
• Participate in training and development programmes to enhance skills and knowledge.

What you'll need

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related technical discipline.
• Less than 2 years of professional experience in cybersecurity or a related role.
• Foundational understanding of cybersecurity principles, security monitoring, and incident response.
• Basic understanding of common cybersecurity threats, vulnerabilities, and attack techniques.
• Familiarity with security monitoring and investigation concepts.
• Strong analytical and problem-solving abilities.
• Good written and verbal communication skills.

Nice to have

• Practical exposure to security monitoring, incident investigation, IT operations, technical support, or system administration.
• Shows foundational competence in at least two operational domains (e.g. Security Intelligence, Identity Management, Compliance, Secured Infrastructure, Secured Development, or Security Education).
• Understanding of endpoint, identity, network, cloud, and email security concepts.
• Familiarity with phishing investigation and basic threat intelligence analysis.
• Knowledge of common security frameworks and incident response methodologies.
• Experience working within a shift-based or 24/7 operational environment is advantageous.
• Entry-level cybersecurity certifications are beneficial but not mandatory.

Details

• Location: Bangalore, India.
• Candidates should be comfortable working rotating shifts, including nights, weekends, and public holidays.