IT Security, Associate

Overview

Associate role in IT Security, handling initial triage of security alerts, user-reported phishing, and day-to-day Zscaler and identity support within a SOC environment.

What you'll do

• Monitor and perform initial triage of security alerts.
• Investigate user-reported phishing and suspicious emails.
• Perform basic email-header analysis and understand SPF, DKIM, and DMARC.
• Analyze suspicious URLs, attachments, and indicators of compromise.
• Monitor and triage endpoint-security alerts.
• Support day-to-day Zscaler operations and troubleshoot user connectivity or access issues.
• Investigate web-access, URL categorization, and security-policy related requests.
• Provide initial support for identity and MFA-related security issues.
• Respond to security-related user queries and service requests.
• Document investigation findings and maintain accurate security tickets.
• Escalate complex or confirmed security incidents to senior SOC analysts.

What you'll need

• 3-5 years of experience in SOC, Cybersecurity Operations, or Information Security.
• Good understanding of phishing, malware, email security, and endpoint security.
• Experience with Zscaler or similar web-security technologies.
• Experience with EDR solutions such as SentinelOne or Microsoft Defender.
• Understanding of email security concepts, including SPF, DKIM, and DMARC.
• Basic understanding of Microsoft Entra ID, MFA, and identity security.
• Basic knowledge of networking concepts, including TCP/IP, DNS, and HTTP/HTTPS.
• Strong troubleshooting, analytical, communication, and documentation skills.

Nice to have

• Experience with Proofpoint or Microsoft Defender for Office 365.
• Familiarity with Microsoft Sentinel or another SIEM platform.
• Exposure to Varonis, KQL, Conditional Access, or basic log analysis.
• Experience with ServiceNow or a similar ticketing system.
• Relevant certifications such as Security+, SC-200, or SC-900.

Details

• Location: Gurgaon, India.