Job Title: IT Security Analyst

Location: Fully Remote

Role Purpos

eMonitor, investigate, and respond to security events to protect the organisation's endpoints, identities, and cloud environments. Proactively reduce risk through vulnerability management, security patch coordination, and cloud posture auditing, while contributing to continuous improvement through automation, reporting, and support for audit and vendor assurance activities

.Key Accountabilities

Monitoring, Triage & Incident Respons

- eManage and respond to security alerts and escalations to ensure timely identification and mitigation of potential threats
- .Analyse security logs and telemetry to identify suspicious activity (e.g., unauthorised access attempts or lateral movement)
- .Create clear incident reports for security events, documenting root cause and actionable post-incident insights

.Vulnerability Management & Patchin

- gConduct regular vulnerability scanning and remediation using Tenable.io to identify and help mitigate risk within existing systems
- .Assist with security patching and updates for Windows, macOS, and Linux using Microsoft Intune and Quest KACE SMA
- .Help coordinate and oversee patching across endpoints to ensure vulnerabilities are addressed promptly

.Cloud Security Posture & Configuration Assuranc

- eHelp maintain a strong Cloud Security Posture Management (CSPM) framework by auditing AWS and Azure environments against CIS Benchmarks and internal security policies

.Threat Protection Toolin

- gMonitor and manage the Microsoft Defender suite to detect and investigate threats across endpoints, identities, and cloud workloads

.Security Automation & Continuous Improvemen

- tDevelop and maintain automated security playbooks and workflows to improve incident response and reduce repetitive manual tasks

.Awareness, Assurance & Third-Party Securit

- yExecute periodic phishing simulations to evaluate employee awareness and help identify higher-risk user groups




- .Support internal and external audits by providing technical evidence and helping to ensure alignment with relevant standards
- .Participate in software and vendor onboarding to help ensure third-party integrations meet security requirements

.What Success Looks Lik

- eSecurity alerts are triaged consistently, escalations are handled promptly, and investigations are well-documented with explicit outcomes
- .Vulnerability scanning is run regularly, remediation is performed and progress is tracked, and patching reduces exposure across Windows, macOS, and Linux environments
- .Cloud environments are routinely assessed against CIS Benchmarks and internal policies, and findings are translated into actionable improvements
- .Security workflows and playbooks are improved over time through automation and lessons learned from incidents

.Candidate Profil

eExperience & Capabilit

- yHands-on experience monitoring, triaging, and responding to security alerts and escalations
- .Experience producing incident reports, including root cause analysis and practical post-incident recommendations
- .Comfort working with audit and assurance requests (collecting evidence, explaining controls, and supporting remediation activities)

.Technical Strengt

- hVulnerability management tooling and processes (including Tenable.io scanning, prioritisation, and remediation tracking)
- .Endpoint management and patch orchestration across Windows, macOS, and Linux (e.g., Microsoft Intune, Quest KACE SMA)
- .Threat detection and investigation using the Microsoft Defender suite across endpoints, identities, and cloud workloads
- .Cloud security fundamentals and posture management across AWS and Azure, including auditing against CIS Benchmarks

.Mindset & OneGP Behaviour

- sAnalytical, curious, and calm under pressure when investigating potential security incidents
- .Collaborative and service-oriented, able to work effectively with IT teams and the wider business to reduce risk
- .Continuous improvement mindset looks for opportunities to automate repeatable tasks and strengthen controls over time

.

📌 Information Technology Security Engineer (India)
🏢 GP Strategies
📍 India