Cyber Security Analyst

Job Summary

The Cyber Security Analyst is a core member of the JAGGAER Security Operations Centre (SOC). The analyst shares the day-to-day threat analytics, security event triage, investigation, and incident response that protect JAGGAERs corporate and production environments across on-premise and cloud systems.

This is a hands-on mid-level operational role. The analyst works as part of a small, close-knit team where everyone shares the core SOC responsibilities. As the analyst develops, they may take ownership of a specialism (for example threat intelligence, threat hunting, or incident response) at approximately 20% of their time, on top of the shared core. This role is based in Hyderabad, India, with hybrid working, and operates within standard working hours.

Core Responsibilities

The core SOC responsibilities are shared across the team. The analyst will:

• Alert triage - Triage and validate security escalations from CrowdStrike Falcon Complete (MDR) and internal sources, prioritising by severity and logging a clear outcome for each.
• Investigation - Investigate confirmed and suspected incidents to establish scope, impact, and root cause, using structured, evidence-based methodology.
• Incident response - Contain, respond to, and document security incidents in line with the Incident Response Procedure - isolating hosts, blocking indicators, and coordinating remediation.
• Correlation & hunting - Correlate activity across CrowdStrike NGSIEM, Observe and the endpoint tooling (CrowdStrike Falcon and Microsoft Defender), using Zscaler VPN data for IP and connection analysis, and hunt for anomalies not surfaced by automated detection (failed logons, privilege escalation, new admin accounts).
• Phishing response - Review and action user-reported phishing (including via PhishER), confirm remediation, and initiate takedowns of malicious domains and leaked credentials.
• Production alignment - Align SOC investigations with security-related production incidents to ensure no coverage gaps between operations and security.
• Detection support - Feed investigation findings, including false positives and coverage gaps, back to the team to inform detection tuning.
• Documentation - Maintain accurate, complete records in Jira and the IR record for all work, and complete daily operational checks and handover.

Requirements

Essential

• 3+ years experience in, or closely related to, the cybersecurity field, with hands-on security operations experience.
• Understanding of Microsoft Windows and Linux/Unix system-level security controls.
• Understanding of common threat-actor techniques, malware behaviour, and persistence mechanisms.
• Hands-on experience with the CrowdStrike Falcon platform, including alert triage, host investigation and response actions such as containment.
• Practical experience with SIEM platforms, including alert triage, event investigation, and documentation. CrowdStrike NGSIEM or comparable technology.
• Practical experience using AI tools to support security work, such as summarizing alerts, drafting queries or analyzing logs, with the judgement to verify output and to keep sensitive data out of unapproved tools in line with company policy.
• Structured, evidence-based investigation approach with clear written and verbal communication.
• Ability to work as part of a close-knit team, sharing the core workload and supporting colleagues.

Desirable

• Experience with the MITRE ATT&CK framework and threat intelligence in operational practice.
• Familiarity with CrowdStrike NGSIEM, including CQL query writing, log ingestion concepts and detection rule structure.
• Experience working alongside a managed detection and response (MDR) provider.
• Experience with Microsoft Defender, Mimecast or phishing-response tooling such as KnowBe4 PhishER.
• Scripting (Python or PowerShell) to automate repetitive triage tasks.
• Familiarity with cloud environments (Azure, O365, AWS).
• Interest in developing a specialism (CTI, threat hunting, or IR).
• Relevant industry certifications held or in progress - for example CompTIA Security+, Blue Team Level 1 (BTL1), or ISC2 Certified in Cybersecurity (CC). Professional membership (ISC2, ISACA) is welcomed.
• Red/Blue team exposure.

How You Will Grow

The Cyber Security Analyst role sits on a clear progression path: Cyber Security Analyst Senior Cyber Security Analyst Lead Cyber Security Analyst, aligned to the NIST NICE and ENISA ECSF frameworks. Progression is evidence-based. Analysts are encouraged to develop a specialism as they grow, held as additional ownership alongside the shared core.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.