Security Analyst

Responsibilities:

• Manage and monitor SIEM Enterprise tools for real-time threat detection.
• Perform log analysis, correlation, alert tuning and false positive reduction.
• Monitor security events across endpoints, the network, and cloud environments.
• Create dashboards, alerts, and reports for security visibility.
• Administer Google Workspace via Google Admin Console to identify and monitor security-related events.
• Perform incident triage, investigation, and escalation.
• Manage incidents through ticketing systems and adhere to SLAs.
• Conduct root cause analysis and forensic investigations.
• Document incidents, evidence, and response actions.
• Support threat detection, containment, eradication, and recovery.
• Manage Endpoint Detection & Response (EDR) tools.
• Implement endpoint security controls and hardening practices.
• Support MDM solutions for device compliance and monitoring.
• Ensure patching, antivirus, and endpoint compliance.
• Monitor network anomalies and suspicious activity in GCP.
• Support network security controls and firewall/VPN monitoring.
• Conduct manual and automated vulnerability assessments and penetration testing in-house.
• Validate and prioritise vulnerabilities based on risks.
• Perform security testing, both manual and automated.
• Track remediation and closure of identified vulnerabilities.
• Implement and monitor email security controls, including phishing protection, spam filtering, and threat detection.
• Support secure configuration and hardening of systems and infrastructure in line with security best practices.
• Improve cloud security posture in Google Cloud Platform by identifying misconfigurations and driving security score enhancements.
• Exposure to Zero Trust principles.
• Basic understanding of IAM / access control models.

Requirements:

• Strong ownership mindset with the ability to operate independently from Day 1 (Proactive and quick learner).
• Strong analytical and investigative mindset.
• Ability to handle real-time incidents under pressure.
• Detail-oriented with strong documentation skills.
• Experience with Google Workspace GWS and GCP environments.
• Hands-on experience with SIEM tools (log analysis, correlation, alert tuning).
• Strong knowledge of the incident response lifecycle and threat analysis.
• Experience in both manual and automated Vulnerability Assessment and Penetration Testing VAPT.
• Understanding of Endpoint Security, Endpoint Detection and Response (EDR) and MDM solutions.
• Knowledge of networking concepts, firewalls and email security solutions.
• Familiarity with VPN and Infrastructure security solutions.
• Develop scripts using Python/Bash for automation of security tasks.
• Certifications like CEH, Security+, or equivalent.