Security operations Analyst

Role: Senior Security Operations Analyst – AI Security & Threat Operations Domain: Cyber Security / Security Operations (SOC) Location: Pune Experience: 6 to 10 Yrs

About the Position

We are seeking a highly skilled Senior Security Operations Analyst to support enterprise security operations with a focus on modern SOC practices, AI-driven threat detection, incident response, and security analytics. The role requires hands-on experience in monitoring, investigating, and responding to security incidents while leveraging AI-enabled security tools and advanced analytics to improve threat detection and operational efficiency.

Technical and Professional Requirements

Mandatory

Minimum 6 years of experience in Security Operations, SOC, Enterprise Security Support, or Infrastructure Security environments.

Hands-on experience in security alert monitoring, incident triage, investigation, escalation, ticket resolution, and incident management.

Working knowledge of:

CrowdStrike EDR

CrowdStrike Next-Gen SIEM

Zscaler

DLP

DNS Security

Vulnerability Management Tools

Firewall, Proxy, and VPN Technologies

Experience in phishing email analysis, vulnerability identification, remediation tracking, log analysis, and security event investigation.

Good understanding of networking fundamentals including TCP/IP, DNS, DHCP, Routing, Switching, Firewall Policies, VPN, and Proxy concepts.

Hands-on experience with AI/ML-driven threat detection and security analytics, preferably within a SIEM/NG-SIEM environment, including alert analysis, query development, dashboards, and reporting.

Excellent communication, stakeholder management, analytical, and problem-solving skills.

Preferred

Experience working in SLA-driven environments with strong documentation and reporting discipline.

Strong understanding of Linux and Windows operating systems.

Knowledge of forensic investigation methodologies and threat hunting practices.

Understanding of compliance and regulatory frameworks such as GDPR, PCI-DSS, and SOC2.

Certifications such as:

CISSP

SSCP

Security+

CEH

SC-200

AZ-500

ITIL

Job Responsibilities

Security Operations & Incident Management

Monitor, triage, investigate, resolve, and escalate security alerts and incidents in accordance with defined SOPs and runbooks.

Perform security event analysis using CrowdStrike EDR, CrowdStrike Next-Gen SIEM, Zscaler, DLP, and related security platforms.

Coordinate with internal teams and end users to validate and investigate potential security incidents.

Support phishing investigations, vulnerability remediation tracking, incident documentation, and RCA activities.

Ensure timely closure and documentation of incidents and tickets while maintaining SLA compliance.

AI Security Operations

Utilize AI-driven threat intelligence platforms for threat correlation, analysis, and prioritization.

Support AI-enabled threat investigations and forensic activities while reducing false positives and identifying actionable threats.

Leverage AI-powered security analytics tools to identify attack patterns, anomalies, and emerging threats.

Assist in developing and optimizing AI-based detection use cases and threat-hunting activities.

Identify trends in AI-generated detections and contribute to false-positive reduction initiatives.

Vulnerability & Risk Management

Support vulnerability assessment and remediation programs.

Participate in risk assessments, threat landscape reviews, and security posture evaluations.

Track remediation efforts and collaborate with stakeholders to address identified security risks.

Threat Hunting & Compliance

Perform proactive threat hunting and security investigations.

Assist with forensic analysis of security incidents.

Support security audits and compliance initiatives related to GDPR, PCI-DSS, SOC2, and organizational security standards.

Process & Documentation

Develop and maintain incident response procedures, operational runbooks, and security documentation.

Contribute to security dashboards, operational reporting, and continuous process improvement initiatives.

Maintain high standards of documentation for incidents, investigations, handovers, and knowledge articles.