Security Analyst (Cyber Defense Analyst)

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Analyst (Cyber Defense Analyst) based in India.

This role offers the opportunity to strengthen enterprise security through hands-on cyber defense, monitoring, investigation, and incident response. You will analyze security events across endpoints, identities, networks, cloud environments, and applications to identify and contain threats. The position combines security operations with proactive threat hunting, detection improvement, and response automation. You will work with modern SIEM, endpoint, Microsoft 365, vulnerability management, and cloud security technologies. The role provides meaningful exposure to security incidents, emerging threats, attacker behaviors, and enterprise security projects. You will collaborate with infrastructure teams, system owners, leadership, and global stakeholders in a fast-paced environment. This is an ideal opportunity for an experienced security professional who combines strong analytical skills with clear communication and a proactive defensive mindset.

Accountabilities:: Monitor, triage, and investigate security alerts, telemetry, and log data across enterprise security platforms, including SIEM and other detection technologies.

Analyze exploits, attacker behavior, suspicious activity, and anomalies across endpoint, identity, network, cloud, and application data sources.

Correlate security events within the SIEM to identify potential threats, validate detections, and support incident declaration and escalation decisions.

Document investigation findings, evidence, response activities, and incident status throughout the incident lifecycle, ensuring clear and timely communication.

Conduct proactive threat hunting and threat research to identify emerging risks, adversary techniques, and gaps in detection coverage.

Contribute to detection engineering and response automation initiatives that improve monitoring, investigation, and containment capabilities.

Support the operation and effectiveness of core security technologies by maintaining their reliability, visibility, and defensive capabilities.

Help develop and refine incident response processes, playbooks, workflows, and operational procedures.

Communicate intrusion activity, incident details, threat trends, and recommended actions clearly to leadership and internal stakeholders.

Partner with infrastructure teams and system owners to review vulnerability findings, prioritize high-risk remediation, and track issues through closure.

Contribute to information security projects and continuous improvement initiatives that strengthen the organization's overall security posture.

Requirements:

5+ years of professional experience in information security, ideally with direct experience in incident response, cyber defense, or security operations within a corporate or enterprise environment.

Hands-on experience with SIEM platforms , including searches, dashboards, alerts, event correlation, and investigations; experience with CrowdStrike NG-SIEM is strongly preferred.

Experience with Microsoft 365 security technologies , particularly Microsoft Defender XDR for email, identity, and collaboration environments.

Working knowledge of networking fundamentals and cloud environments, including AWS and Azure .

Foundational knowledge of Windows and macOS operating systems.

Strong written and verbal communication skills, including the ability to document incidents clearly and explain technical findings to non-technical stakeholders.

Familiarity with security frameworks such as MITRE ATT&CK, NIST CSF, and CIS Controls is preferred.

Basic scripting or query-language knowledge, such as PowerShell or Python , to support security analysis and automation is preferred.

Experience supporting vulnerability management with tools such as Tenable and Wiz , including triage, validation, prioritization, and remediation tracking, is preferred.

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology , or a related discipline.

A cybersecurity certification such as CCSP, GCIH, CySA+, GSEC, SSCP , or an equivalent credential is required.

Strong analytical, problem-solving, follow-up, and quality-assurance skills, combined with the ability to remain effective in a fast-paced environment.

Collaborative and professional approach, with the ability to work effectively with colleagues and stakeholders at different levels of an organization.

Benefits:

Comprehensive health insurance for employees, with options to extend coverage to eligible dependents.

Paid time off and company holidays , plus additional leave benefits according to company policy.

Flexible work arrangements designed to support work-life balance.

Learning and development opportunities , including support for continuous technical growth and upskilling.

Opportunities to pursue professional certifications and credentials as part of ongoing career development.

Employee wellness initiatives supporting physical and mental well-being.

Retirement and statutory benefits in accordance with applicable Indian regulations.

An inclusive, collaborative, and people-first culture that encourages ownership, learning, and diverse perspectives.

Exposure to modern security technologies and opportunities to contribute to enterprise-wide cybersecurity initiatives.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1