IT Security Analyst

Overview

Technical IT Security Analyst role focused on identity and access management (IAM) operations and security monitoring, working rotating 24x7 shifts.

What you'll do

• Respond to and resolve IAM incidents and service tickets within defined SLAs, following established processes and procedures.
• Perform day-to-day tasks across IAM platforms such as Active Directory and Azure AD.
• Troubleshoot issues related to SSO, MFA, Active Directory and Entra ID.
• Monitor security alerts and events from SIEM, EDR, IT infrastructure monitoring tools and other security tools.
• Process and troubleshoot user onboarding, offboarding, provisioning, de-provisioning, and access modification requests across enterprise systems, ensuring RBAC and least-privilege principles are followed.
• Work closely with IT support teams and application owners to investigate access issues and enforce policy.
• Correlate events across multiple security tools to establish initial context, identifying false positives and distinguishing them from potential security incidents.
• Perform basic investigation using logs, IP addresses, domains, URLs, hashes and user/account information, investigating indicators such as suspicious logins and phishing attempts and taking defined actions.
• Maintain accurate ticket documentation, ensure appropriate ticket updates and maintain SLAs.
• Participate in shift handovers and maintain clear operational communication.
• Escalate complex issues to Level 2/3 engineers in a timely manner.

What you'll need

• Minimum 3 years of hands-on experience in IT security.
• Bachelor's degree in computer science or a related field.
• Experience with IAM solutions such as Microsoft Azure AD, authentication and MFA.
• Prior experience with both on-premises and cloud (Azure) environments.
• Understanding of SIEM concepts and security event analysis.
• Understanding of user lifecycle management, access control models, and directory services.
• Working knowledge of ITIL practices and experience with ServiceNow.

Nice to have

• Basic knowledge of EDR/XDR platforms such as CrowdStrike, Microsoft Defender, etc.
• Experience with one or more SIEM platforms such as Microsoft Sentinel.
• Basic scripting/automation knowledge, preferably PowerShell or Python.
• Understanding of access certification and Segregation of Duties (SoD).

Details

• Work location: Pune or Chennai (Pune preferred).
• Shift timings: 24x7 with rotation shifts.
• Applicants may be required to appear onsite at a Wolters Kluwer office as part of the recruitment process.