Senior Cyber Security Analyst

Overview

Lead vulnerability management, application security testing, and product security operations across the enterprise, acting as the primary security partner to Product Engineering, DevOps, and Cloud teams.

What you'll do

• Identify, prioritize, remediate, validate, and report security risks across applications, cloud environments, infrastructure, and software development pipelines.
• Conduct in-depth analysis of security alerts and incidents to determine root cause and impact.
• Utilize incident response plans, including containment, eradication, and recovery strategies.
• Lead investigations into security breaches and incidents, documenting findings and recommendations for remediation.
• Assist in the development and enforcement of security policies, procedures, and best practices.
• Collaborate with cross-functional teams to assess security risks associated with new projects and initiatives.
• Provide guidance and mentorship to Level 1 Security Analysts.
• Monitor and analyze security logs and data sources to proactively identify emerging threats and vulnerabilities.
• Stay abreast of industry trends, emerging threats, and best practices in cybersecurity.
• Play a key role in the creation and maintenance of playbooks and SOPs.

What you'll need

• Minimum five years of experience in cybersecurity, product security, application security, vulnerability management, DevSecOps, or a closely related discipline.
• Hands-on experience operating an enterprise vulnerability management platform such as Qualys, Tenable, Rapid7, or an equivalent solution.
• Experience with application security testing, including SAST, DAST, SCA, secrets scanning, and Infrastructure as Code scanning.
• Experience with GitHub Advanced Security, Checkmarx, Burp Suite, or comparable technologies.
• Demonstrated ability to work directly with software engineering, DevOps, Cloud, and technology operations teams to triage and remediate findings.
• Working knowledge of secure software development, OWASP guidance, cloud security, modern CI/CD practices, and vulnerability remediation workflows.
• Experience coordinating third-party penetration tests and tracking findings through validation and closure.
• Ability to communicate technical risk clearly to engineering teams, control owners, GRC stakeholders, and leadership.
• Strong organizational skills and the ability to oversee multiple workstreams across a distributed enterprise.

Nice to have

• Experience supporting AWS environments, containerized workloads, Kubernetes, and cloud-native application architectures.
• Experience with EASM, exposure management, attack-path analysis, or continuous threat exposure management capabilities.
• Experience designing or improving security checks in GitHub Actions or comparable CI/CD platforms.
• Familiarity with ISO 27001, SOC 2, PCI DSS, secure development controls, risk exceptions, and audit evidence requirements.
• Experience developing vulnerability management dashboards and metrics for both engineering and executive audiences.
• Experience or demonstrated interest in using AI, APIs, scripting, and workflow automation to improve vulnerability management reporting and operations.
• Relevant certifications such as CISSP, CSSLP, GIAC, OSCP, cloud security, or comparable credentials.

Details

• Job location: Bangalore.
• Work mode: Hybrid, Monday to Friday.