Cyber Security Analyst

Position: Security Analyst SOC Operations | 24x7 Shift | Noida / Bengaluru About This Role We are seeking a vigilant and technically proficient Security Analyst to join our Security Operations Center (SOC). This is a critical role responsible for 24x7 monitoring, detection, and response to security incidents. You will work with industry-leading security tools to identify threats, investigate security events, and provide actionable intelligence to protect our organizational assets. Key Responsibilities Monitor and analyze security events and alerts from SIEM (IBM QRadar) in real-time Investigate suspected security incidents and create comprehensive incident reports Correlate and analyze logs from multiple security data sources and endpoints Respond to security alerts related to CrowdStrike Falcon endpoints and threat detection Manage and respond to Zscaler (ZIA/ZPA) security events and policy violations Review and analyze Data Loss Prevention (DLP) incidents and take appropriate action Monitor attack surface using specialized tools to identify external vulnerabilities Perform threat hunting and proactive threat identification Escalate critical incidents to senior analysts and management appropriately Maintain detailed documentation of all security events and investigations Collaborate with IT and business teams to remediate identified security issues Participate in security alerts, on-call support, and incident response drills Required Qualifications 2+ years of experience in Security Operations Center (SOC) or cybersecurity role Proven hands-on experience with IBM QRadar SIEM platform Working knowledge of SIEM solutions and log management Hands-on experience with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) Strong experience with CrowdStrike Falcon platform and all its modules Experience with Data Loss Prevention (DLP) solutions and policies Familiarity with attack surface assessment and management tools Strong understanding of network fundamentals and protocols (TCP/IP, DNS, HTTP) Knowledge of common cyber threats, attack vectors, and attack methodologies Ability to work in a 24x7 shift rotation including night shifts and weekends Required Technical Skills IBM QRadar SIEM: Correlation rules, event management, alert tuning, and custom searches CrowdStrike Falcon: Endpoint Detection and Response (EDR), behavioral analysis, threat hunting Zscaler Services: ZIA and ZPA configuration, security policy management, log analysis DLP Tools: Policy configuration, incident investigation, and false positive management Log Analysis: Interpreting security logs and events from diverse sources Network Protocol Analysis: Packet analysis (Wireshark), network traffic interpretation Endpoint Security: Antivirus, antimalware, host-based intrusion detection (HIDS) Attack Surface Visibility: External vulnerability scanning, asset discovery platforms Threat Intelligence: Utilizing threat feeds, IOCs, MITRE ATT&CK framework Windows & Linux Systems: Basic security concepts, process analysis, system hardening Incident Management: Ticketing systems (ServiceNow, Jira, Manage Engine), runbooks, escalation procedures Preferred Qualifications & Skills Bachelor's degree in Computer Science, Information Security, or related field (or equivalent work experience) Experience with additional SIEM platforms (Splunk, ArcSight, SumoLogic) Knowledge of SOAR (Security Orchestration, Automation and Response) platforms Vulnerability assessment and management tools (Qualys, Tenable, Rapid7) Incident response frameworks (NIST Cybersecurity Framework, MITRE ATT&CK) Cloud security experience (AWS Security Hub, Azure Sentinel, GCP) Scripting knowledge (Python, PowerShell, Bash) for automation and analysis Security certifications: CompTIA Security+, CEH Experience with threat hunting and Advanced Persistent Threat (APT) analysis Malware analysis and reverse engineering basics Knowledge of proxy and firewall technologies Monitor and analyze security events and alerts from SIEM (IBM QRadar) in real-time Investigate suspected security incidents and create comprehensive incident reports Correlate and analyze logs from multiple security data sources and endpoints Respond to security alerts related to CrowdStrike Falcon endpoints and threat detection Manage and respond to Zscaler (ZIA/ZPA) security events and policy violations Review and analyze Data Loss Prevention (DLP) incidents and take appropriate action Monitor attack surface using specialized tools to identify external vulnerabilities Perform threat hunting and proactive threat identification Escalate critical incidents to senior analysts and management appropriately Maintain detailed documentation of all security events and investigations Collaborate with IT and business teams to remediate identified security issues Participate in security alerts, on-call support, and incident response drills 2+ years of experience in Security Operations Center (SOC) or cybersecurity role Proven hands-on experience with IBM QRadar SIEM platform Working knowledge of SIEM solutions and log management Hands-on experience with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) Strong experience with CrowdStrike Falcon platform and all its modules Experience with Data Loss Prevention (DLP) solutions and policies Familiarity with attack surface assessment and management tools Strong understanding of network fundamentals and protocols (TCP/IP, DNS, HTTP) Knowledge of common cyber threats, attack vectors, and attack methodologies Ability to work in a 24x7 shift rotation including night shifts and weekends