?????? ??????? ??????? ????????: Remote ?????????? ????: Full-time ??????????: 2–4 years ???? ????, ??? ?????? ????????? ?? ???????? ???? ??????? ?? ??????? ????? ????? ??? ???? We are looking for a detail-oriented InfoSec Analyst with 2–4 years of hands-on experience to join our security team and help protect our systems, applications, and data. The ideal candidate should have a good understanding of information security principles and practical experience in security monitoring, vulnerability management, incident response, risk assessment, and compliance. You should be comfortable handling day-to-day security activities, investigating potential security issues, identifying vulnerabilities, and working with IT and engineering teams to strengthen security controls. ??? ????????????????
- Monitor security alerts, logs, and incidents, and investigate potential security threats in a timely manner.
- Identify, assess, prioritize, and track security vulnerabilities across systems and applications.
- Support incident response activities, threat analysis, and root-cause investigations.
- Conduct security risk assessments and assist with internal and external security audits and compliance activities.
- Review existing security controls, identify gaps, and recommend appropriate improvements.
- Work with IT and engineering teams to implement security controls and address identified vulnerabilities.
- Maintain security documentation, reports, risk registers, and incident records.
- Support the implementation and maintenance of information security policies, procedures, and processes.
- Assist with security assessments, control testing, and remediation tracking.
- Stay updated on emerging cybersecurity threats, vulnerabilities, industry standards, and best practices. ???????? ??????
- Good understanding of Information Security, Cybersecurity, and Networking concepts.




- Knowledge of the CIA Triad, authentication, access control, vulnerability management, threat analysis, and risk management.
- Hands-on familiarity with SIEM platforms, vulnerability scanners, endpoint security solutions, and security monitoring tools.
- Understanding of security frameworks and standards such as ISO 27001, NIST, and CIS Controls.
- Practical experience in identifying security vulnerabilities, investigating incidents, and supporting remediation activities.
- Ability to assess security risks, identify control gaps, and recommend appropriate corrective measures.
- Solid analytical, problem-solving, documentation, and reporting skills.
- Good communication and teamwork skills, with the ability to collaborate with technical and non-technical stakeholders.
- Ability to manage assigned security activities independently and work effectively within a team. ????????? ??????????????
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Relevant certifications such as Security+, CEH, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or equivalent are a plus.
- Experience supporting security audits, risk assessments, vulnerability assessments, and compliance initiatives.
- Familiarity with security policies, procedures, control implementation, and audit evidence.
- Exposure to enterprise security environments and cross-functional security projects. ???? ?? ?????
- Fully remote work environment.
- Hands-on exposure to real-world cybersecurity operations and security assessments.
- Opportunity to work with experienced security professionals.
- Learning and professional development opportunities.
- Exposure to security tools, frameworks, compliance standards, and enterprise security practices.
- Opportunity to develop your expertise and contribute to strengthening organizational security.

📌 Information Security Analyst (Bengaluru)
🏢 CertSigma
📍 Bengaluru