About the Role

Rubiscape’s platform processes sensitive
enterprise data and powers business-critical decisions for customers in
banking, insurance, manufacturing, and government — making continuous security
monitoring non-negotiable. As a SecOps Analyst, you will be the first line of
detection and response for threats across Rubiscape’s SaaS infrastructure,
internal systems, and customer-facing platform. You will operate the SIEM,
investigate alerts, and work with the security engineering team to
progressively automate response playbooks, raising Rubiscape’s mean time to
detect and respond with every quarter.

Key Responsibilities

· Monitor SIEM dashboards (Splunk
/ ELK) and triage security alerts across cloud infrastructure, application
logs, and endpoint telemetry; escalate confirmed incidents per runbook.

· Conduct first-response
investigation and containment for security incidents including account
compromise, data exfiltration attempts, malware, and DDoS events.

· Maintain and improve detection
rules, correlation searches, and alert thresholds in the SIEM; reduce




false-positive rate while increasing signal fidelity for Rubiscape-specific
threat patterns.

· Operate vulnerability
management workflows: ingest scanner output (Qualys, Tenable, or equivalent),
track remediation status, and report SLA compliance to security engineering.

· Contribute to threat
intelligence enrichment — mapping IOCs and TTPs from CERT-IN advisories, ISACs,
and threat feeds to Rubiscape’s detection coverage.

· Document incident timelines,
evidence chains, and post-incident reports to audit-ready standard for ISO
27001 and SOC 2 evidence requirements.

· Participate in tabletop
exercises and red team/blue team drills to validate detection and response
capabilities.

Nice to Have

· Certifications: CompTIA
Security+, CySA+, or GIAC GCIH / GCFE.

· Experience with SOAR platforms
(Palo Alto XSOAR, Splunk SOAR) and writing automated response playbooks.

· Familiarity with CERT-IN
empan

📌 SecOps Analyst (Pune)
🏢 Rubiscape
📍 Pune