We are seeking a highly skilled and hands-on Cybersecurity Analyst to join our team in Bangalore. In this role, you will be on the front lines of our defense, ensuring the security, integrity, and resilience of our cloud infrastructure and corporate network. The ideal candidate will have 5 to 8 years of practical experience with a robust focus on Cloud Security (AWS), Web Application Security, Endpoint Protection, Security Operations (SecOps), and IT Risk Management.

Key Responsibilities

Cloud Security & Web Applications (AWS Focus)

- Implement, manage, and continuously improve security controls across our AWS cloud infrastructure (e.g., IAM, Security Groups, GuardDuty, AWS WAF, CloudTrail).
- Perform regular vulnerability assessments and penetration testing on web applications and APIs.
- Integrate security into the CI/CD pipeline (DevSecOps) and utilize SAST/DAST tools to identify application vulnerabilities early in the software development lifecycle.
- Monitor cloud environments for misconfigurations and enforce Cloud Security Posture Management (CSPM).

Endpoint Security

- Deploy, administer, and monitor Endpoint Detection and Response (EDR) and Next-Generation Antivirus (NGAV) solutions.
- Investigate endpoint alerts, analyze malicious activity, and implement containment and remediation strategies.
- Ensure all corporate devices meet baseline security compliance and oversee patch management processes.

Security Operations (SecOps) & Incident Response

- Act as a primary responder for security incidents, executing incident response playbooks for cloud, web, and endpoint threats.
- Monitor SIEM dashboards, analyze logs from various sources (firewalls, AWS, endpoints), and perform active threat hunting to detect advanced persistent threats (APTs).
- Automate routine security tasks and responses using scripting (Python, Bash)



or SOAR platforms.

Risk Management & Compliance

- Conduct comprehensive IT risk assessments, threat modeling, and vendor security risk evaluations.
- Help maintain and enforce enterprise security policies, standards, and procedures.
- Assist in continuous compliance monitoring for industry standards (such as SOC 2, ISO 27001, HIPAA, HITRUST among others) and support internal/external security audits.

Required Qualifications & Experience

- Experience: 5 to 8 years of hands-on experience in a Cybersecurity, SecOps, or Cloud Security engineering role.
- Education: Bachelor's degree in computer science, Information Security, or a related technical field.
- Cloud Expertise: Proven, hands-on experience securing AWS hosting environments and managing AWS native security services.
- Technical Skills:
- Deep understanding of web application vulnerabilities (OWASP Top 10) and mitigation techniques.
- Hands-on experience with SIEM platforms and EDR tools (Microsoft Defender).
- Familiarity with network security architecture, TCP/IP, and routing protocols.
- Risk Frameworks: Practical knowledge of risk management frameworks (NIST, CIS Controls) and compliance mandates.

Desirable Certifications

(Holding one or more of the following is highly preferred)

- AWS Certified Security Specialty
- Certified Information Systems Security Professional (CISSP)
- Certified Cloud Security Professional (CCSP)
- CompTIA Cybersecurity Analyst (CySA+) or Certified Ethical Hacker (CEH)

What We Look For

- Problem Solver: You have an analytical mindset and love digging into logs to uncover the root cause of an issue.
- Self-Starter: You are proactive about identifying security gaps and don't wait to be told what to secure.
- Communicator: You can explain complex security risks to developers, IT engineers, and non-technical stakeholders alike

📌 Cyber Security Analyst (Bengaluru)
🏢 Phox Health
📍 Bengaluru