Role : Security Analyst/Consultant

Experience : 3 - 4 Years

Location : Bangalore - Work from Office

Department : Information Security

Reporting To : Information Security Manager

- Strong ownership mindset with ability to operate independently from Day 1 (Proactive and quick learner)

- Strong analytical and investigative mindset

- Ability to handle real-time incidents under pressure

- Detail-oriented with strong documentation skills

- Clear Technical communication

- Interview Rounds : 2 Technical + HR round (virtual rounds all of them)

- Office Location : Kormangala

Role Summary :

We are looking for a hands-on cybersecurity professional with 3 - 4 years of experience in Security Operations, Threat Monitoring, Vulnerability Management and Penetration Testing. The role requires expertise in SIEM, endpoint security, email security, network analysis, and incident response, with exposure to modern security practices and frameworks like NIST Cybersecurity Framework and OWASP Top 10.

Required Skills :

- Experience with Google Workspace GWS and GCP environments

- Hands-on experience with SIEM tools (log analysis, correlation, alert tuning)

- Strong knowledge of incident response lifecycle and threat analysis

- Experience in both manual and automated Vulnerability Assessment & Penetration Testing VAPT

- Understanding of Endpoint Security, Endpoint Detection & Response (EDR) and MDM solutions

- Knowledge of networking concepts, firewalls and email security solutions

- Familiarity with VPN, and Infrastructure security solutions

- Develop scripts using Python/Bash for automation of security tasks

- Certifications like CEH, Security+, or equivalent

Key Responsibilities :

1. SIEM & Security Monitoring

- Manage and monitor SIEM Enterprise tools for real-time threat detection

- Perform log analysis, correlation, alert tuning and false positive reduction

- Monitor security events across endpoints, network, and cloud environments

- Create dashboards, alerts, and reports for security visibility

- Administer Google Workspace via Google Admin Console to identity and monitor security related events

2. Incident Response & Threat Management :

- Perform incident triage, investigation, and escalation

- Manage incidents through ticketing systems and adhere to SLAs

- Conduct root cause analysis and forensic investigations

- Document incidents, evidence, and response actions

- Support threat detection, containment, eradication, and recovery

3. Endpoint Security & MDM & Network :

- Manage Endpoint Detection & Response (EDR) tools

- Implement endpoint security controls and hardening practices

- Support MDM solutions for device compliance and monitoring

- Ensure patching, antivirus, and endpoint compliance

- Monitor network anomalies and suspicious activity in GCP

- Support network security controls and firewall/VPN monitoring

4. Vulnerability Assessment & Penetration Testing (VAPT) :

- Conduct manual and automated vulnerability assessments and penetration testing in-house

- Validate and prioritize vulnerabilities based on risks

- Perform security testing both manual and automated

- Track remediation and closure of identified vulnerabilities

5. Email & Infrastructure Security :

- Implement and monitor email security controls, including phishing protection, spam filtering, and threat detection

- Support secure configuration and hardening of systems and infrastructure in line with security best practices

- Improve cloud security posture in Google Cloud Platform by identifying misconfigurations and driving security score enhancements

- Exposure to Zero Trust principles

- Basic understanding of IAM / access control models