ICC - Security Operations Analyst - Cyber Defense | IST Timezone

Overview

Security Operations Analyst supporting a global 24/7 Cybersecurity Operations Centre. The role monitors, investigates, and responds to threats across cloud, endpoint, network, and enterprise environments.

What you'll do

• Monitor and triage security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms.
• Analyze Windows, Linux, database, application, web server, firewall, and NIDS/HIDS logs.
• Investigate suspicious activity and identify potential root causes.
• Support incident response, remediation, and recovery activities.
• Coordinate escalation paths with cybersecurity teams and Incident Response specialists.
• Improve detection quality, reduce false positives, and tune monitoring whitelists.
• Prepare technical reports and maintain SOC documentation.

What you'll need

• 5+ years of relevant IT or cybersecurity experience.
• Hands-on experience with security alert triage and incident investigation.
• Experience with SIEM and EDR platforms.
• Strong log analysis skills across Windows, Linux, and enterprise infrastructure.
• Knowledge of Microsoft Security technologies and at least one major cloud platform.
• Knowledge of email security, network monitoring, and incident response.
• Fluent English with excellent written and verbal communication skills.

Nice to have

• Tier-1 or Tier-2 Incident Response experience.
• AWS security monitoring experience.
• Scripting experience with Python, PowerShell, Bash, Ruby, or similar.
• Relevant certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA, or MCSE.
• Experience in a global SOC or distributed cybersecurity team.

Details

• Location: India.
• Work mode: Remote-first.
• Employment type: Full-time contract.
• Contract duration: 6 months, with potential extension.
• IST timezone.