Cyber Security Analyst (SOC)
Location: Pune
Experience: 2+ years
Immediate Joiners Preferred.

For Immediate response, Kindly share resumes to [email protected] with Sub of "Cyber Security Analyst" along with Notice period.

Role Summary
We are seeking a Cyber Security Analyst with 2+ years of hands-on SOC experience to monitor, detect, investigate, and respond to cyber security threats across the enterprise environment. The ideal candidate will have solid knowledge of cyber-attack techniques, threat hunting, incident response, vulnerability management, and security operations processes.
This role will leverage a modern security technology stack centered around Microsoft Sentinel, Microsoft Defender, Microsoft Entra ID (Azure AD), Tenable, and Email Security platforms such as Proofpoint, Abnormal Security, or equivalent solutions . The successful candidate will be responsible for proactive threat detection, incident investigation, security monitoring, and continuous improvement of security operations capabilities.

Core Responsibilities
Monitor security events, alerts, and incidents through SIEM, XDR/EDR and email security platforms.
Investigate and respond to security alerts, suspicious activities, malware infections, phishing attempts, account compromises, and other cyber threats.
Perform proactive threat hunting activities using available telemetry, threat intelligence, and behavioral indicators.
Analyze attacker tactics, techniques, and procedures (TTPs) using the MITRE ATT&CK; framework.
Create threat hunting hypotheses and identify potential indicators of compromise (IOCs) within the environment.
Validate, tune, and optimize detection rules, analytics, alerting logic, and security playbooks to reduce false positives and improve detection capabilities.
Investigate high-severity incidents and coordinate response activities with IT and business stakeholders.
Support incident containment, eradication,



recovery, and post-incident analysis activities.
Monitor and manage vulnerabilities identified through Tenable and Microsoft security solutions, working with infrastructure teams to ensure timely remediation.
Perform root cause analysis of security incidents and provide actionable recommendations.
Conduct phishing investigations and email threat analysis using enterprise email security solutions.
Develop and maintain incident response procedures, investigation runbooks, and operational documentation.
Participate in tabletop exercises, purple team activities, and cyber security incident simulations.
Generate operational security reports, dashboards, and metrics for technical and non-technical stakeholders.
Maintain awareness of emerging cyber threats, vulnerabilities, attack campaigns, and adversary techniques.
Ensure all security incidents and investigations are properly documented and tracked through completion.
Collaborate closely with SOC, IT Operations, Infrastructure, Cloud, and End User Computing teams to enhance overall security posture.

Required Technical Skills
Security Operations (SOC)
Strong understanding of SOC operations, incident response, threat detection, and cyber attack methodologies.
Experience investigating phishing, malware, ransomware, business email compromise (BEC), credential theft, and insider threat incidents.
Knowledge of MITRE ATT&CK; framework, Indicators of Compromise (IoCs), and threat intelligence.
SIEM
Microsoft Sentinel
Strong understanding of SIEM architecture, log analysis,



correlation rules, and security monitoring.
XDR / EDR
Microsoft Defender XDR
Microsoft Defender for Endpoint
Experience investigating endpoint, identity, cloud, and email-related security incidents.
Identity Security
Microsoft Entra ID (Azure AD)
Conditional Access Policies
Identity Protection
Authentication and access-related security monitoring
Email Security
Proofpoint, Abnormal Security, Microsoft Defender for Office 365, or equivalent email security platforms
Phishing analysis and email threat investigations
Vulnerability Management
Tenable.io / Tenable.sc / Nessus
Vulnerability assessment, prioritization, remediation tracking, and reporting
Threat Hunting
Threat hunting methodologies
Log and telemetry analysis
Detection engineering and use case development

Preferred Qualifications
Bachelor's degree in Cyber Security, Information Security, Computer Science, or related field.
Experience working within a Security Operations Center (SOC) environment.
Industry certifications such as:
SC-200 (Microsoft Security Operations Analyst)
Security+
CEH
CySA+
GSEC
AZ-500
Experience with KQL (Kusto Query Language) for Microsoft Sentinel and Defender investigations.
Strong analytical, investigative, and problem-solving skills.
Ability to work independently and effectively manage multiple security investigations simultaneously.

Experience Required
Minimum 2+ years of experience in Cyber Security Operations (SOC).
Hands-on experience with:
Microsoft Sentinel
Microsoft Defender XDR
Microsoft Defender for Endpoint
Microsoft Entra ID (Azure AD)
Tenable/Nessus
Email Security platforms (Proofpoint, Abnormal Security, Defender for Office 365, or equivalent)
Demonstrated experience in threat hunting, incident response, alert triage, and cyber attack investigations.

📌 Cyber Security Analyst (SOC) (Pune)
🏢 Genpact
📍 Pune