Sr Information Security Analyst

Overview

Senior Information Security Analyst to support the Cyber Defense Center (CDC) on the India first shift, handling senior-level security monitoring, alert triage, incident response support, risk analysis and operational reporting, and training selected NOC engineers in Tier 1 alert triage.

What you'll do

• Provide India first-shift CDC coverage for security monitoring, alert triage, investigation support and incident escalation.
• Monitor and analyze security alerts, events, vulnerabilities and potential threats across SIEM, EDR, endpoint, cloud, identity and network security platforms.
• Review and validate security events to determine risk, business impact, urgency and appropriate response actions.
• Support incident response activities, including detection, investigation, containment support, remediation tracking and post-incident documentation.
• Serve as a senior escalation point for junior analysts during the assigned India first shift.
• Provide technical guidance and mentoring to junior analysts on alert review, investigation steps, escalation procedures, documentation and CDC best practices.
• Train selected NOC engineers to perform Tier 1 security alert triage, including alert validation, enrichment, initial documentation, escalation criteria and CDC handoff procedures.
• Develop and maintain T1 triage guidance, job aids, decision trees and runbooks to support consistent NOC alert handling.
• Provide review, feedback and escalation guidance for T1 alerts handled by NOC engineers to ensure quality, consistency and proper escalation.
• Partner with NOC leadership and CDC leadership to improve alert intake, handoff consistency and operational alignment.
• Track daily CDC activities, open investigations, escalations, remediation follow-up items and shift-level operational priorities.
• Prepare and communicate operational updates, incident trends, risk findings and status reports to security leadership and relevant stakeholders.
• Support shift handoff documentation to ensure continuity across CDC operations.
• Assist with developing, reviewing and maintaining CDC procedures, playbooks, standards, escalation criteria and operational documentation.
• Participate in security assessments, control reviews, audits and compliance-related activities as needed.
• Support the operation and improvement of security tools and technologies, including SIEM, EDR, endpoint protection, vulnerability management, cloud security and incident response platforms.
• Identify, assess and help mitigate security risks across infrastructure, applications, endpoints, cloud environments and business processes.
• Partner with IT, Engineering, Compliance, NOC and business teams to support secure processes, remediation activities, alert handling and security control adoption.
• Stay current on emerging threats, attack techniques, vulnerabilities and security technologies to support proactive defense improvements.
• Assist with reporting on security metrics, incident trends, risk findings, control effectiveness and CDC operational performance.

What you'll need

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology or a related field; equivalent experience may be considered.
• 5+ years of experience in Information Security, Security Operations, Incident Response, Risk Management or a related cybersecurity role.
• Experience working in a SOC, CDC or similar cyber defense environment.
• Strong understanding of security monitoring, alert triage, incident response, escalation procedures and remediation tracking.
• Experience analyzing security events from tools such as SIEM, EDR, endpoint protection, identity platforms, network security tools, vulnerability scanners or cloud security platforms.
• Working knowledge of security frameworks and control standards such as NIST, ISO 27001, CIS Controls or similar.
• Working knowledge of cloud platforms such as AWS, Azure or GCP and related cloud security concepts.
• Ability to assess risk, document findings, recommend remediation actions and communicate security concerns clearly.
• Ability to train or coach technical team members on alert handling, documentation, escalation and operational procedures.
• Strong problem-solving skills and the ability to manage multiple priorities during the assigned shift.
• Strong communication skills with the ability to work effectively with technical and non-technical stakeholders.

Details

• Location: Bangalore, Karnataka, India.
• Works the India first shift.