Job Opening for Security Analyst (Job Code RT 1497)

Apply Before:

Job Role:

Location:

Experience:

CTC:

Job Summary

Key Responsibilities

• Monitor and analyse security alerts, events, and incidents from Microsoft Sentinel and Microsoft Defender XDR platforms.
• Identify, categorize, prioritize, and triage incoming incidents using internal log sources, threat intelligence, and predefined playbooks.
• Conduct initial investigation of potential security incidents and determine whether to escalate or close based on findings.
• Perform root-cause and historical analysis using SOC tools to support ongoing investigations or identify patterns of attack.
• Monitor the SOC email queue and other communication channels for external or user-submitted threat reports.
• Document incidents, investigations, and outcomes clearly and accurately in the SOC case management system.
• Collaborate with cross-functional teams to share insights, support escalations, and recommend mitigation strategies.
• Maintain and update SOC documentation, processes, shift handover logs, and threat intelligence reports.
• Stay informed about emerging threats, vulnerabilities, and security trends relevant to the Microsoft security ecosystem.
  

Qualifications:

• 13 years / Freshers of experience in a SOC or cybersecurity role.
• Hands-on experience with Microsoft Sentinel, Defender for Endpoint, Defender for Identity, or similar SIEM/XDR tools.
• Strong knowledge of common attack vectors, MITRE ATT&CK framework, and incident response processes.
• Familiarity with log analysis, security monitoring, and threat detection.
• Excellent analytical, problem-solving, and written communication skills.
• Relevant certifications (preferred but not mandatory): SC-200, CompTIA Security , Microsoft Cybersecurity Architect, etc.