Job Summary

Advance Analyst provides a technical escalation point during Security Incidents, determining extent of threat and business impacts in partnership with applicable business or IT personnel as needed, then advising and performing the most suitable course of action to contain and remediate the incident. Provides further support and input to the monitoring team during high-priority incidents. Drive continuous improvement process to reduce false positives by identifying opportunities for content tuning, L1 procedure/playbook enhancements, etc.

Responsibilities

- Responsible for acting on alerts, events, and incidents escalated from the Level 1 Analyst
- Triage malware incidents, their priority and the need for escalation
- Monitor for emerging threat patterns and vulnerabilities
- Assist with recommendations and workarounds
- Exhibit leadership qualities when and where required and act as shift lead
- Coordinate with other external stakeholders
- Communicate with management on incident updates
- Ability to complete the incident lifecycle without higher level supervision
- Establish and maintain intrusion detection and policies and offense rules
- Tune response and alerting mechanisms
- Import current signatures from manufacturer
- Provide status reports to applicable management
- Have a thorough understanding of technological requirements for client systems and provide guidelines to effectively mitigate security risks
- Analyze and assess Firewall policy and rule base sets
- Handle emergencies 24x7
- Assist with BAU activities if not responding to incidents

Requirements

- 4+ years of Information Technology experience, preferably within the financial services sector,



with hands-on incident management and security operations expertise.
- Strong knowledge of cybersecurity technologies and concepts, including SIEM, DLP, IDS/IPS, firewalls, anti-malware, encryption, operating systems, databases, web applications, network infrastructure, and security configurations.
- Experience in network traffic analysis, threat detection, malware analysis, software vulnerabilities, exploits, and scripting, with the ability to identify emerging attack patterns and trends.
- Proficient in analyzing and correlating security data from multiple sources, including security events, system logs, application logs, device logs, and publicly available intelligence.
- Understanding of adversary tactics, techniques, and procedures (TTPs), with the ability to extract, organize, and leverage large datasets for investigations and threat analysis.
- Demonstrated ability to lead and mentor Level 1 analysts, while effectively operating in high-volume, results-driven environments and participating in 24x7 on-call support as required.
- Excellent communication and documentation skills, with the ability to convey technical information clearly to diverse audiences while maintaining strict confidentiality of security matters.
- Highly organized, detail-oriented, and adaptable team player, capable of multitasking, managing changing priorities, taking initiative, and continuously maintaining current technical knowledge and skills.

Job Details

- Full Time
- Worker Type: Employee
- Job Exempt (Yes / No): Yes

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Analyst II-Cyber Defense (Hyderabad)
🏢 Invesco
📍 Hyderabad