Role & responsibilities
Investigate and respond to security alerts and cyber incidents from triage through containment, eradication, remediation and closure.
Conduct threat hunting, IOC/TTP analysis and malicious behaviour investigation.
Perform host and network triage, including investigation of Windows/Linux systems, network activity and security logs.
Investigate malware, phishing, ransomware and account compromise incidents.
Work with SIEM, EDR/XDR and other security technologies to detect, investigate and respond to threats.
Develop and enhance detection rules, response mechanisms, scripts and automation to improve security operations.
Analyse security data and contribute to incident RCA, post-incident reviews and continuous improvement.
Support Cyber Defence projects and improvements across global/regional environments.
Collaborate with IT/OT, Cybersecurity and other technology teams for incident containment and remediation.
Contribute to incident response procedures,



playbooks and operational handovers across global teams.

Preferred candidate profile
5+ years of hands-on experience in Incident Response, Cyber Defence, SOC/Blue Team or Cybersecurity Operations.
Previous experience as a SOC Analyst/L2-L3 Analyst, Incident Responder, Cyber Defence Analyst, Threat Hunter or similar role.
Solid experience with Incident Response, Threat Hunting and security incident investigation.
Hands-on experience with SIEM and EDR/XDR platforms such as Microsoft Sentinel/Defender, CrowdStrike, SentinelOne, Splunk, QRadar, Elastic or similar.
Valuable understanding of network services and protocols, Windows/Linux settings and security logs.
Experience with PowerShell and/or Python and query languages such as KQL, SPL or SQL.
Exposure to malware/phishing investigation, digital forensics, detection engineering and security automation will be an advantage.

📌 Cyber Security Analyst Pune
🏢 Ace Recruitment Placement Consultants
📍 Pune