Cyber Security Analyst (SOC) /n Location: Pune /n Experience: 2+ years /n Immediate Joiners Preferred. /n /n For Immediate response, Kindly share resumes to [email protected] with Sub of "Cyber Security Analyst" along with Notice period. /n /n Role Summary /n We are seeking a Cyber Security Analyst with 2+ years of hands-on SOC experience to monitor, detect, investigate, and respond to cyber security threats across the enterprise workplace. The ideal candidate will have strong knowledge of cyber-attack techniques, threat hunting, incident response, vulnerability management, and security operations processes. /n This role will leverage a modern security technology stack centered around Microsoft Sentinel, Microsoft Defender, Microsoft Entra ID (Azure AD), Tenable, and Email Security platforms such as Proofpoint, Abnormal Security, or equivalent solutions . The successful candidate will be responsible for proactive threat detection, incident investigation, security monitoring, and continuous improvement of security operations capabilities. /n /n Core Responsibilities /n /n

- Monitor security events, alerts, and incidents through SIEM, XDR/EDR and email security platforms.

/n

- Investigate and respond to security alerts, suspicious activities, malware infections, phishing attempts, account compromises, and other cyber threats.

/n

- Perform proactive threat hunting activities using available telemetry, threat intelligence, and behavioral indicators.

/n

- Analyze attacker tactics, techniques, and procedures (TTPs) using the MITRE ATT&CK; framework.

/n

- Create threat hunting hypotheses and identify potential indicators of compromise (IOCs) within the environment.

/n

- Validate, tune, and optimize detection rules, analytics, alerting logic, and security playbooks to reduce false positives and improve detection capabilities.

/n

- Investigate high-severity incidents and coordinate response activities with IT and business stakeholders.

/n

- Support incident containment, eradication, recovery, and post-incident analysis activities.

/n





- Monitor and manage vulnerabilities identified through Tenable and Microsoft security solutions, working with infrastructure teams to ensure timely remediation.

/n

- Perform root cause analysis of security incidents and provide actionable recommendations.

/n

- Conduct phishing investigations and email threat analysis using enterprise email security solutions.

/n

- Develop and maintain incident response procedures, investigation runbooks, and operational documentation.

/n

- Participate in tabletop exercises, purple team activities, and cyber security incident simulations.

/n

- Generate operational security reports, dashboards, and metrics for technical and non-technical stakeholders.

/n

- Maintain awareness of emerging cyber threats, vulnerabilities, attack campaigns, and adversary techniques.

/n

- Ensure all security incidents and investigations are properly documented and tracked through completion.

/n

- Collaborate closely with SOC, IT Operations, Infrastructure, Cloud, and End User Computing teams to enhance overall security posture.

/n /n /n Required Technical Skills /n Security Operations (SOC) /n /n

- Strong understanding of SOC operations, incident response, threat detection, and cyber attack methodologies.

/n

- Experience investigating phishing, malware, ransomware, business email compromise (BEC), credential theft, and insider threat incidents.

/n

- Knowledge of MITRE ATT&CK; framework, Indicators of Compromise (IoCs), and threat intelligence.

/n /n SIEM /n /n

- Microsoft Sentinel

/n

- Strong understanding of SIEM architecture, log analysis, correlation rules, and security monitoring.

/n /n XDR / EDR /n /n

- Microsoft Defender XDR

/n





- Microsoft Defender for Endpoint

/n

- Experience investigating endpoint, identity, cloud, and email-related security incidents.

/n /n Identity Security /n /n

- Microsoft Entra ID (Azure AD)

/n

- Conditional Access Policies

/n

- Identity Protection

/n

- Authentication and access-related security monitoring

/n /n Email Security /n /n

- Proofpoint, Abnormal Security, Microsoft Defender for Office 365, or equivalent email security platforms

/n

- Phishing analysis and email threat investigations

/n /n Vulnerability Management /n /n

- Tenable.io / Tenable.sc / Nessus

/n

- Vulnerability assessment, prioritization, remediation tracking, and reporting

/n /n Threat Hunting /n /n

- Threat hunting methodologies

/n

- Log and telemetry analysis

/n

- Detection engineering and use case development

/n /n /n Preferred Qualifications /n /n

- Bachelor's degree in Cyber Security, Information Security, Computer Science, or related field.

/n

- Experience working within a Security Operations Center (SOC) environment.

/n

- Industry certifications such as:

/n

- SC-200 (Microsoft Security Operations Analyst)

/n

- Security+

/n

- CEH

/n

- CySA+

/n

- GSEC

/n

- AZ-500

/n

- Experience with KQL (Kusto Query Language) for Microsoft Sentinel and Defender investigations.

/n

- Strong analytical, investigative, and problem-solving skills.

/n

- Ability to work independently and effectively manage multiple security investigations simultaneously.

/n /n /n Experience Required /n /n

- Minimum 2+ years of experience in Cyber Security Operations (SOC).

/n

- Hands-on experience with:

/n

- Microsoft Sentinel

/n

- Microsoft Defender XDR

/n

- Microsoft Defender for Endpoint

/n

- Microsoft Entra ID (Azure AD)

/n

- Tenable/Nessus

/n

- Email Security platforms (Proofpoint, Abnormal Security, Defender for Office 365, or equivalent)

/n

- Demonstrated experience in threat hunting, incident response, alert triage, and cyber attack investigations.

/n /n

📌 Cyber Security Analyst (SOC) (Pune)
🏢 Genpact
📍 Pune