Sr Security Analyst (SOC-IR, Cloud)

Overview

Senior Security Analyst to strengthen Gartner's global Security Operations capability, handling complex investigations, improving detection and response, and protecting the company's people, data and intellectual property.

What you'll do

• Independently investigate security incidents from initial triage through scoping, containment, remediation and closure, escalating high-impact events and coordinating with the Lead Security Analyst when needed.
• Correlate evidence across SIEM, EDR, cloud, email, proxy, network and supporting telemetry to determine root cause, scope, impact and remediation.
• Produce concise, high-quality investigation notes, incident reports and actionable outcomes for technical teams and business stakeholders.
• Develop and tune detection content, investigative workflows and playbooks aligned with MITRE ATT&CK, the Cyber Kill Chain and other relevant frameworks.
• Develop practical tools and automation that reduce repetitive work, accelerate investigations, and improve SOC effectiveness.
• Hunt proactively for malicious behavior, vulnerabilities, control gaps, misconfigurations and anomalous activity across endpoint, network and cloud environments.
• Act as an escalation point for other analysts, share knowledge, and help strengthen technical and investigative capability.
• Contribute practical ideas that improve processes, demonstrate operational excellence, and advance the maturity of the global SOC.

What you'll need

• 3 to 5 years of experience in information security, security operations, incident response, or an equivalent hands-on role.
• Proven experience triaging and investigating cybersecurity events and incidents, prioritizing effectively and working confidently in a time-sensitive environment.
• Hands-on experience across SIEM or XDR, EDR, email security, web proxy and digital forensics and incident response.
• Experience investigating AWS, Azure or GCP environments and working with SPL, KQL, SQL or comparable query languages.
• Practical threat-hunting experience.
• Ability to automate with Python, PowerShell, Bash, or similar technologies.
• Strong written and verbal communication, documentation, and stakeholder engagement skills, with the ability to explain technical issues clearly and support other analysts.
• Curiosity, continuous learning, and a track record of improving tools, processes, and team capability.

Nice to have

• A bachelor's degree in cybersecurity, computer science, engineering or equivalent practical experience.
• Red or purple team exposure.
• Certifications such as GCIH, GCFA, or comparable credentials.

Details

• Location: Gurgaon.
• Operates on a continuous 24x7 SOC model across time zones.
• Hybrid work environment.
• Job Requisition ID: 115158.