Security Analyst

Responsibilities:
Manage and monitor SIEM Enterprise tools for real-time threat detection.
Perform log analysis, correlation, alert tuning and false positive reduction.
Monitor security events across endpoints, the network, and cloud environments.
Create dashboards, alerts, and reports for security visibility.
Administer Google Workspace via Google Admin Console to identify and monitor security-related events.
Perform incident triage, investigation, and escalation.
Manage incidents through ticketing systems and adhere to SLAs.
Conduct root cause analysis and forensic investigations.
Document incidents, evidence, and response actions.
Support threat detection, containment, eradication, and recovery.
Manage Endpoint Detection & Response (EDR) tools.
Implement endpoint security controls and hardening practices.
Support MDM solutions for device compliance and monitoring.
Ensure patching, antivirus, and endpoint compliance.
Monitor network anomalies and suspicious activity in GCP.
Support network security controls and firewall/VPN monitoring.
Conduct manual and automated vulnerability assessments and penetration testing in-house.
Validate and prioritise vulnerabilities based on risks.
Perform security testing, both manual and automated.
Track remediation and closure of identified vulnerabilities.
Implement and monitor email security controls, including phishing protection, spam filtering, and threat detection.
Support secure configuration and hardening of systems and infrastructure in line with security best practices.
Improve cloud security posture in Google Cloud Platform by identifying misconfigurations and driving security score enhancements.
Exposure to Zero Trust principles.
Basic understanding of IAM / access control models.
Requirements:
Strong ownership mindset with the ability to operate independently from Day 1 (Proactive and quick learner).
Strong analytical and investigative mindset.
Ability to handle real-time incidents under pressure.
Detail-oriented with strong documentation skills.
Experience with Google Workspace GWS and GCP environments.
Hands-on experience with SIEM tools (log analysis, correlation, alert tuning).
Strong knowledge of the incident response lifecycle and threat analysis.
Experience in both manual and automated Vulnerability Assessment and Penetration Testing VAPT.
Understanding of Endpoint Security, Endpoint Detection and Response (EDR) and MDM solutions.
Knowledge of networking concepts, firewalls and email security solutions.
Familiarity with VPN and Infrastructure security solutions.
Develop scripts using Python/Bash for automation of security tasks.
Certifications like CEH, Security+, or equivalent.

Experience
3-5 yrs