Intrusion Analyst III

Monitor, detect, analyze, investigate, and support remediation of cybersecurity events following SOC procedures and playbooks.

Use and develop automation, detection engineering, and approved AI/GenAI tools responsibly to improve investigation quality, efficiency, and response outcomes.

Collaborate globally with stakeholders, engineering teams, incident responders, and business units to escalate and communicate security events and improve SOC processes.

4–6 years of SOC/cybersecurity operations experience (or 2 years with relevant Bachelor degree).

Technical qualification: B.E./B.Tech/M.S./M.Tech/MCA or equivalent in computer science, IT, engineering, cybersecurity, or related area.

Hands-on experience with EDR, SIEM (Azure Sentinel/Microsoft Sentinel and Google Chronicle desirable), SOAR, email security, firewall, IPS, and security investigation skills including malware and phishing analysis.

Not explicitly mentioned: specific notice period or mandatory certifications (certifications preferred but not mandatory).

Experienced intrusion analyst comfortable working with complex telemetry across endpoint, network, cloud, and identity platforms.

Practically skilled in using AI/Generative AI tools critically as part of cybersecurity investigations and automation workflows within SOC operations.

Able to operate effectively in a global, fast-paced environment, collaborating cross-functionally and adhering to governance, ethics, and compliance standards.