At Rocket India, security isn't a checkbox — it's a cornerstone of everything we build. Our Security Operations Center stands guard 24/7, ensuring that the technology powering millions of homeownership dreams stays resilient against evolving threats. As a Senior Information Security Analyst, you won't just respond to incidents — you'll shape how we detect, investigate, and neutralize them. You'll mentor the next generation of analysts, drive measurable improvements in detection quality, and serve as the calm, decisive voice when the pressure is highest. If you're ready to lead from the front lines and leave the SOC stronger than you found it, we want to talk.

About the Role

You'll operate as a senior technical leader within the SOC — owning complex investigations, driving high-severity incidents to resolution, and elevating the capability of the entire team. Here's what that looks like:

- Lead end-to-end investigation of complex, multi-vector security incidents across endpoint, identity, email, network, and cloud telemetry, including P1 and P2 events

- Serve as the incident commander or primary investigator on high-severity incidents, coordinating cross-functional response efforts with ThreatOps, SecOps Engineering, IT, and application teams

- Reconstruct detailed attack timelines and determine blast radius by correlating diverse telemetry sources, producing executive-ready incident summaries

- Mentor and coach junior and mid-level SOC analysts, conducting case reviews, providing real-time guidance during active investigations, and raising the team's technical baseline

- Design, refine, and validate detection logic across SIEM, EDR, and cloud security platforms — owning the detection quality lifecycle from hypothesis through tuning and retirement

- Drive measurable reduction in false positive volume and mean time to detect/respond through continuous process and tooling improvements

- Identify, scope, and champion automation opportunities, partnering with SecOps Engineering to build SOAR playbooks that eliminate repetitive manual work

- Author and maintain advanced triage and investigation runbooks, ensuring consistency and scalability across shifts

- Lead post-incident reviews and after-action reports, translating lessons learned into concrete detection, process, or architecture improvements

- Proactively hunt for threats using hypothesis-driven methodologies, threat intelligence, and behavioral analytics





- Represent SOC capabilities and findings to senior leadership and cross-functional stakeholders with clear, concise communication

- Participate in and help design tabletop exercises, purple team engagements, and response drills to stress-test and strengthen readiness

- Stay current on emerging threats, attacker tradecraft, and industry trends, feeding relevant intelligence back into detection and response strategies

About You

Minimum Qualifications

- 3+ years in an information security analyst or SOC analyst role with demonstrated progression in responsibility

- 5+ years of experience in a technology role

- Bachelor's degree in information assurance, computer science, or a related field, or equivalent experience

- Deep hands-on experience with SIEM platforms, including advanced query building, correlation rule development, and large-scale log analysis

- Strong proficiency with endpoint detection and response tooling, including the ability to conduct deep-dive forensic investigations

- Expert-level understanding of operating systems (Windows, macOS, Linux/Unix) internals, network protocols, and traffic analysis

- Ability to write scripts and automation (Python, PowerShell, or equivalent) to support investigations and operational efficiency

- Strong command of the MITRE ATT&CK; framework with the ability to map observed activity, identify coverage gaps, and inform detection strategy

- Proven experience owning incidents through the full incident response lifecycle — detection, containment, eradication, recovery, and post-incident review

- Demonstrated ability to lead under pressure, make sound decisions with incomplete information, and communicate clearly to both technical and non-technical audiences

- Experience mentoring or providing technical guidance to other analysts

- Transparent, structured written communication — capable of producing investigation documentation, executive summaries, and after-action reports

- Schedule flexibility — available to work outside standard business hours, including evenings, weekends, and holidays, as incident severity and volume demand.





- Experience serving as incident commander or lead investigator on P1 incidents in an enterprise environment

- Demonstrated track record of designing or significantly improving detection logic with measurable impact on alert fidelity

- Hands-on experience building or operationalizing SOAR playbooks and security automation workflows

- Industry certifications such as GCIH, GCFA, GCIA, CISSP, or CISM

- Experience with cloud security monitoring and incident response across AWS, Azure, or GCP environments

- Familiarity with threat hunting methodologies and proactive detection approaches

- Experience in the mortgage, financial services, or another regulated industry

- Prior experience contributing to or leading purple team exercises.

What You Will Get

At Rocket India, senior talent gets senior investment. You'll enjoy comprehensive health and wellness benefits, a competitive compensation package that reflects your expertise, and continuous professional development — including support for advanced certifications and conference attendance. You'll work with best-in-class security tooling, collaborate with brilliant people across the globe, and have genuine influence over how we protect one of America's most recognized brands. We foster a culture where leadership is earned through impact, not title, and where your ideas for making the SOC better don't just get heard — they get built.

About Us

Rocket India, registered as NSM Services Private Limited and formerly Mr. Cooper, is a wholly owned subsidiary of Rocket Mortgage, LLC, headquartered in Detroit, Michigan. As a core part of Rocket's global ecosystem, Rocket India helps shape the future of home financing through technology, innovation, operations, product, and customer-focused solutions. Our teams build scalable platforms and digital experiences that simplify mortgage origination and servicing while supporting Rocket's mission to "Help Everyone Home."

We are committed to providing a fair and inclusive workplace for all team members and applicants. All qualified applicants will receive consideration for employment without regard to sex, religion, caste, disability, or gender identity, consistent with applicable Indian law, including the Constitution of India, the Code on Wages, 2019, the Rights of Persons with Disabilities Act, 2016, and the Transgender Persons (Protection of Rights) Act, 2019. We welcome applications from persons with disabilities and from all sections of society.

📌 Senior Information Security Analyst (Bengaluru)
🏢 NSM Services
📍 Bengaluru