What youll do how youll make your mark The Security Analyst is responsible for ensuring the security and integrity of the organizations information systems and data This role involves identifying and mitigating security risks reviewing project security requirements and maintaining compliance with security standards The Security Analyst will also focus on detection engineering by designing systems to detect malicious activities and implementing automation technologies to streamline security operations including vulnerability management and incident response Identify and ensure mitigation of information security risks within the organization standards procedures and practices across various types of projects Review requests for adherence to security policies assuring requests are executed correctly Identify security incidents and respond to ensure threats and risks are contained Maintain integrity of security controls toolsets and other securityrelevant services Develop and analyze security reports and build presentations as required Facilitate status reports and other relevant information to compliance staff and department leadership Monitor and audit systems for security violations vulnerabilities and abnormalities Develop implement and maintain alignment with security control frameworks Make updates to security policies standards procedures practices and operating procedures as required Assist with incident handling and other incident response activities as required Complete and monitor the status of corrective action plans resolve audit findings and security issues ensuring problems are resolved in an effective and timely manner Implement and evaluate the effectiveness of data loss prevention DLP policies and detections Design build and finetune systems and processes to detect malicious activities or unauthorized behaviors Implement tools processes and procedures to identify unusual or suspicious behavior that may indicate a breach Create actionable alerts based on detected threats to prompt immediate response from concerned teams Implement automation technologies to streamline security operations such as vulnerability management threat detection and incident response Use automation to reduce incident response time by enabling swift threat remediation through predefined actions Who you are what youll need to succeed A working level understanding of controls e g access control auditing authentication encryption and system integrity Versed in operating systems such as Linux various distributions and Microsoft Windows Experience with Microsoft Active Directory encryption and algorithms authorization and authentication mechanisms software network monitoring TCP IP networks DNS next generation firewalls and intrusion detection prevention systems General knowledge of network design and common network protocols and infrastructure systems Ability to create scripts to automate processes in PowerShell Python or Bash is a plus Ability to recognize and analyze malware Ability to analyze large data sets and identify patterns and anomalies Ability to quickly create and deploy countermeasures or mitigations under pressure Build effective relationships Develop and use cooperative relationships to facilitate the accomplishment of work goals Experience with the PCIDSS ISO27001 and or SOC II compliance frameworks is a plus Experience implementing and measuring security controls aligned with NIST 80053 and the Center for Internet Security CIS is a plus Project Management skills is a plus Experience with the following technologies is a plus SentinelOne Singularity Platform Tanium Google Chronicle SIEM Cloudflare L3L7 security technologies Tenable io Lacework Recorded Future KnowBe4 ServiceNow Jira Microsoft Defender for Endpoints Microsoft Security and Compliance Microsoft Azure Key Vault Experience with the native security service solutions for public cloud service providers AWS Google Azure Oracle is a plus Educational And Certification Requirements A degree in Cybersecurity Information Technology Computer Science or related field is desirable Industry recognized certifications are a plus Certifications may include CISSP Certified Information Systems Security Professional CISM Certified Information Security Manager CEH Certified Ethical Hacker CompTIA Security certifications issued by the SANS Institute etc Certifications issued by public cloud providers AWS Azure Google Oracle etc is a plus

📌 Security Operations Analyst Senior (Mumbai)
🏢 Newfold Digital Philippines
📍 Mumbai