Role & responsibilities:

- Monitor and investigate security events using SIEM, EDR/XDR, and cloud security platforms.
- Lead cybersecurity incident response, root cause analysis, containment, and recovery activities.
- Conduct vulnerability assessments, remediation tracking, and risk reporting.
- Perform penetration testing, ethical hacking, web application security testing, and cloud security assessments.
- Execute Red Team and Purple Team exercises to evaluate security controls and detection capabilities.
- Conduct threat hunting activities and develop security use cases.
- Review security architecture, configurations, and access controls across cloud and on-premise environments.
- Support secure software development, application security testing, and DevSecOps initiatives.
- Participate in ISO 27001, SOC 2, and regulatory compliance audits.
- Conduct third-party/vendor security assessments.
- Provide security awareness training and mentor junior security analysts.

Preferred candidate profile

- Hands-on experience in Security Operations,



Incident Response, Vulnerability Management, and Penetration Testing.
- Experience securing Azure and SaaS environments.
- Knowledge of cloud, network, endpoint, and application security.

Required Tools & Technologies:

Security Operations: Microsoft Sentinel, Microsoft Defender XDR, BitDefender, Splunk

Vulnerability Management: Nessus, Tenable.io, Qualys, Rapid7

Web & Application Security: Burp Suite Skilled, OWASP ZAP, Postman

Network Security: Nmap, Wireshark, TCPDump, Palo Alto, Fortinet, Cisco Firewalls

Penetration Testing & Red Teaming: Metasploit, BloodHound, Mimikatz, Impacket, Cobalt Strike, Hashcat, Hydra

Cloud Security: Microsoft Azure, Microsoft Defender for Cloud, Entra ID, Conditional Access

DevSecOps: Veracode, SonarQube, GitHub Advanced Security, Snyk

Preferred Certifications:

CISSP, CISM, OSCP, CEH, PNPT, GCIH, AZ-500, SC-200, SC-300.

📌 Senior Cyber Security Analyst (Chennai)
🏢 Digisme
📍 Chennai