Security Analyst III

About NAF & Position Summary

New American Funding (NAF) is a mortgage lender offering an array of loan options. Established in 2003 and headquartered in Tustin, CA, United States.

Company Website: www.newamericanfunding.com.

Job Location: Chennai.

Position Summary

Security Analyst leads the protection of enterprise systems, networks, and data through advanced monitoring, detection, analysis, and response to security events.

This role provides technical leadership to the security operations team, mentors junior analysts, collaborates with engineers, IT, and DevOps teams, and contributes to strategic improvements in threat detection, incident response, and overall security posture in a fast-paced, evolving environment.

The position emphasizes hands-on expertise in SOC tools, proactive threat hunting, and team guidance to maintain a resilient defensive capability.

Responsibilities

Monitoring & Detection

• Oversee and perform advanced monitoring of alerts from SIEM, EDR/XDR, IDS/IPS, firewalls, and other security platforms.
• Lead triage, escalation decisions, and quality assurance for security events across the team.
• Develop, tune, and maintain detection rules; lead proactive threat hunting programs to uncover hidden threats.
• Analyze security telemetry trends to identify emerging attack patterns and refine detection strategies.

Incident Response Leadership

• Lead investigations of complex suspicious activity, conduct in-depth root cause analysis, and coordinate multi-team response efforts.
• Direct containment, eradication, and recovery during security incidents; serve as primary escalation point for major events.
• Oversee documentation of incidents, findings, lessons learned, and corrective actions in incident management systems.
• Develop, refine, and maintain incident response playbooks, procedures, and post-incident review processes.

Automation and Integration

• Develop scripts and automate routine security tasks using Python, PowerShell, or Bash to improve efficiency.
• Collaborate with DevOps to embed security controls in systems, applications, and cloud environments.

Mentorship and Collaboration

• Mentor and develop junior security analysts and team members through technical guidance, training, and knowledge sharing.
• Partner with IT, DevOps, and business teams to implement security best practices across the organization.
• Lead or support company-wide cybersecurity awareness initiatives, including phishing simulations and training programs.

Thought Leadership

• Stay current with emerging threats, attack vectors, defensive techniques, and threat intelligence sources.
• Share insights with the team and leadership to drive proactive security enhancements.
• Contribute to security program strategy, tool evaluations, and process optimization.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related discipline (or equivalent work experience).
• 4-7+ years of experience in IT security, SOC operations, incident response, or related technical roles (with at least 2 years in a senior or lead capacity preferred).
• Strong hands-on experience with SIEM platforms, EDR/XDR, vulnerability scanners, firewalls, and endpoint protection tools.
• In-depth knowledge of networking protocols, operating systems (Windows/Linux), authentication mechanisms, and cloud security principles (AWS, Azure, O365).
• Excellent analytical, troubleshooting, and problem-solving skills.
• Proven ability to lead investigations, mentor team members, and communicate effectively with technical and non-technical stakeholders.
• Attention to detail and ability to perform under pressure in high-stakes security situations.

Education, Experience, and Certifications

• Security certifications such as CompTIA Security+, CySA+, CASP+, CEH, GCIH, GCIA, CISSP, or equivalent.
• Scripting proficiency (Python, PowerShell, Bash) for automation, analysis, and orchestration.
• Prior experience leading SOC operations, incident response teams, threat hunting programs, or shift supervision.
• Familiarity with threat intelligence platforms and frameworks (e.g., MITRE ATT&CK).
• Exposure to cloud security tools and DevSecOps practices.

Key Competencies

• Exceptional analytical and strategic problem-solving ability.
• Strong leadership and mentorship skills with a team-oriented mindset.
• Ability to prioritize tasks, enforce procedures, and make sound decisions in high-pressure environments.
• Commitment to continuous learning and passion for threat intelligence and advancing security operations.