Senior Service Desk Analyst Security Operations
Total years of exp-
Relevant years of exp in Service desk Analysis-
Relevant years of exp in Security Operation-
Current Ctc-
Expected Ctc-
Notice period-
Current Location-
Are you ready to work from office all 5 days a week in Bangalore?
Role & responsibilities
- Advanced Threat Triage & Incident Escalation: Act as the primary escalation point for complex security anomalies, false-positive tuning, and high-priority alerts across multi-cloud and hybrid environments.
- Endpoint Detection & Response (EDR/XDR Operations): Leverage platforms such as CrowdStrike Falcon and Microsoft Defender to investigate host activity, isolate compromised endpoints, review threat telemetry, and execute precise containment workflows.
- Behavioral Analysis & Anomaly Detection: Utilize Darktrace self-learning AI and network telemetry to uncover sophisticated, stealthy, or unknown threats, analyzing behavioral shifts and unusual lateral movement across enterprise networks.
- Incident Lifecycle & Problem Management: Oversee the complete incident lifecycle for critical security alerts. Conduct comprehensive Root Cause Analysis (RCA) and forensic investigations to prevent recurring threat vectors and ensure strict SLA adherence.
- Identity & Access Security Integration: Partner with Identity teams to investigate identity-based threats, suspicious authentications, and compromised credentials across Entra ID / Azure AD environments.
- Process Automation & Playbook Tuning: Evaluate existing security monitoring workflows to design, implement, and optimize detection rules, automated playbooks, and alert correlation logic across security tooling.
- Documentation & Threat Governance: Author and maintain advanced technical incident reports, forensic documentation, and standard operating procedures (SOPs) for internal team execution and client-facing updates.
- Mentorship & Quality Oversight: Coach, train, and guide junior analysts. Perform quality assurance reviews on incident response documentation, communication clarity, and containment protocols.
Preferred candidate profile
- Experience: Minimum of 5 years in progressive IT and cybersecurity support roles, with proven hands-on experience as a senior escalation point or L2 analyst within a Security Operations Center (SOC) or managed security environment.
- Technical Expertise:
- EDR & Security Platforms: Deep proficiency with industry-leading security tools, including CrowdStrike Falcon, Microsoft Defender XDR, and Darktrace, with hands-on experience in alert triage, threat hunting, and containment actions.
- Threat Analysis & Investigation: Demonstrated ability to correlate logs across multi-vendor toolsets, analyze indicators of compromise (IOCs), and distinguish complex attacks from false positives.
- Identity & Cloud Security: Foundational knowledge of identity protection, cloud security posture management, and integration telemetry between endpoint agents and cloud infrastructure.
- Should have good communication skills and good working attitude
