Our partner is looking for a Sr IT Cyber Defense Analyst based in India. Join a cybersecurity team focused on protecting critical IT environments through advanced threat detection, incident response, and AI-enabled security operations. As a Senior IT Cyber Defense Analyst and Shift Lead, you will oversee day-to-day Security Operations Center (SOC) activities, coordinate investigations, and guide analysts in responding to evolving cyber threats. You will leverage technologies such as Microsoft Sentinel, Microsoft Defender, and endpoint detection and response (EDR) platforms to strengthen security monitoring and detection capabilities. By combining threat hunting, automation, and AI-assisted investigations, you will help improve operational efficiency while maintaining accuracy and human oversight. Working closely with incident response, infrastructure, network, endpoint, and cloud teams, you will drive timely containment, remediation, and recovery. This remote opportunity is ideal for an experienced cybersecurity professional who thrives in a fast-paced environment and is ready to lead a 24/7 security operations team. Accountabilities - Lead daily SOC shift operations, prioritize security alerts, manage escalations, coordinate incident handling, and ensure timely shift handovers and compliance with service-level agreements (SLAs). - Investigate complex cybersecurity incidents involving phishing, malware, ransomware, compromised accounts, endpoint threats, and suspicious network activity. - Develop, optimize, and troubleshoot SIEM queries, analytics rules,



and detection use cases using Microsoft Sentinel and Kusto Query Language (KQL). - Leverage approved AI and large language model (LLM) tools to support alert triage, investigations, threat intelligence enrichment, KQL development, incident reporting, and workflow automation. - Independently validate AI-generated queries, scripts, and recommendations to ensure accuracy, security, reliability, and compliance with data privacy requirements. - Automate repetitive SOC processes using Python, PowerShell, APIs, and Security Orchestration, Automation, and Response (SOAR) capabilities. - Mentor SOC analysts, improve investigation quality, strengthen team capabilities, and promote consistent operational practices. - Review detection performance, reduce false positives, identify coverage gaps, and continuously improve security monitoring and incident response workflows. - Collaborate with Incident Response, IT, Endpoint, Network, and Cloud teams to coordinate threat containment, remediation, recovery, and follow-up actions. - Promote the responsible adoption of AI and automation while maintaining human oversight and sound cybersecurity judgment. - Support continuous improvement initiatives to enhance detection coverage, investigation efficiency, and overall SOC performance. Requirements - Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent practical experience. - At least 5 years of qualified experience in a Security Operations Center (SOC), cyber defense, or incident response, including experience in shift leadership, incident coordination, or analyst mentoring. -

📌 ICT Cyber Security Senior Specialist (India)
🏢 Jobgether
📍 India