Role & responsibilities:
Monitor and investigate security events using SIEM, EDR/XDR, and cloud security platforms.
Lead cybersecurity incident response, root cause analysis, containment, and recovery activities.
Conduct vulnerability assessments, remediation tracking, and risk reporting.
Perform penetration testing, ethical hacking, web application security testing, and cloud security assessments.
Execute Red Team and Purple Team exercises to evaluate security controls and detection capabilities.
Conduct threat hunting activities and develop security use cases.
Review security architecture, configurations, and access controls across cloud and on-premise environments.
Support secure software development, application security testing, and DevSecOps initiatives.
Participate in ISO 27001, SOC 2, and regulatory compliance audits.
Conduct third-party/vendor security assessments.
Provide security awareness training and mentor junior security analysts.

Preferred candidate profile
Hands-on experience in Security Operations, Incident Response,



Vulnerability Management, and Penetration Testing.
Experience securing Azure and SaaS settings.
Knowledge of cloud, network, endpoint, and application security.

Required Tools & Technologies:

Security Operations: Microsoft Sentinel, Microsoft Defender XDR, BitDefender, Splunk

Vulnerability Management: Nessus, Tenable.io, Qualys, Rapid7

Web & Application Security: Burp Suite Skilled, OWASP ZAP, Postman

Network Security: Nmap, Wireshark, TCPDump, Palo Alto, Fortinet, Cisco Firewalls

Penetration Testing & Red Teaming: Metasploit, BloodHound, Mimikatz, Impacket, Cobalt Strike, Hashcat, Hydra

Cloud Security: Microsoft Azure, Microsoft Defender for Cloud, Entra ID, Conditional Access

DevSecOps: Veracode, SonarQube, GitHub Advanced Security, Snyk

Preferred Certifications:

CISSP, CISM, OSCP, CEH, PNPT, GCIH, AZ-500, SC-200, SC-300.

📌 Senior Cyber Security Analyst Chennai (India)
🏢 Digisme
📍 India