Security Analyst

• Identify and mitigate risks within third-party environments by meticulously reviewing security documentation and assessments.
• Combine expert analysis with automated monitoring to provide visibility needed to safeguard sensitive data.
• Review vendor risk by evaluating security assessments and documentation; deliver actionable recommendations.
• Conduct comprehensive vulnerability scans and penetration tests for Smarsh customers.
• Produce detailed technical reports categorizing vulnerabilities and providing actionable remediation strategies.
• Serve as a subject matter expert and primary contact, guiding clients through platform features and cybersecurity best practices.
• Manage regular client engagements and contribute to the continuous improvement of Smarsh VRM team operations.

Information Security Analyst II

• Opportunity to collaborate with innovative people around the world
• Make an impact by supporting issue fixes and incident resolution in SAP On-Premise Application
• Responsible for handling regular Security activities like role design and fixes
• Supporting audit activities, analyzing and supporting Fire Fighter user administration and log reviews
• Develop and implement full suite of SAP GRC products and implement solutions according to SOX compliance

SAP Security Analyst

• Execute manual penetration testing engagements against a variety of web applications/services and software
• Develop other security engineers
• Advise management of violations or egregious negligence toward defined standards in targets tested
• Provide actionable remediation feedback for findings and/or long-term risk mitigation guidance
• Provide clear communication on the issue to developers and verify the efficacy of the ‘fix’
• Partner with developers to drive improvement in application security as a result of security assessment engagements

Senior Security Analyst

• SOC Dashboard Monitoring.
• First Response to Alerts generated from Security Solutions ingested in the SIEM/SOAR Tool.
• Verifying the Facts and Enriched Data in Incidents using SOAR Platform.
• Preliminary triage based on the facts from the SOAR.
• Sending email notifications for Medium & lower priority alerts to the client for confirmation on potentially false or benign alerts.
• Helping seniors in triage, evidence collection, incident documentation, etc.
• Reporting to the Shift Lead about the alerts handled during the shift and updating the SHO Sheet.
• Escalation of Incidents based on the preliminary triage using the escalation workflow in case of possible true positives.
• Identifying daily repeat false positive alerts, and interesting patterns based on monitoring of alerts.
• Reporting any tool outages or monitoring downtime during one’s own shift to the Shift Lead or Leads asap.
• Performing Monthly Maintenance Tasks for Health Checks for the Security Monitoring and Response Tools
• Develop, test, and fine-tune detection rules and use cases based on log sources, threat intelligence, attack patterns, and client requirements.
• Identify emerging threats and incorporate them into use-cases for alerts and detections.
• Optimize and refine alert thresholds and logic to minimize false positives and enhance detection accuracy.
• Leverage expertise in Microsoft 365 Defender/Defender XDR, Microsoft Defender for Endpoint, Defender for Office 365 and Entra ID Protection to improve overall threat detection and response.
• Analyze security logs and telemetry data for signs of compromise, anomalous activities, or malicious behavior.
• Prioritize the work effectively and handle shifting priorities professionally.
• Work closely with cross-functional teams (IT, Cloud Operations, Application Development) to mitigate security risks and improve SOC capabilities.
• Create detailed reports and post-analysis reports to communicate findings and recommendations to technical and non-technical stakeholders.
• Contribute to continuous improvement of SOC processes, including SOPs, playbooks, runbooks, and escalation procedures.
• Stay updated with the latest threat landscape, vulnerabilities, and attack methods.
• Share knowledge and insights with other SOC analysts and participate in team knowledge-sharing sessions.
• Participate in red/blue team exercises to test and improve detection and response capabilities.

Security Analyst – Level 1

• Plan and execute internal cyber security audits and control reviews across applications, infrastructure, and business processes.
• Document findings, assess risk and impact, and track remediation through closure with respective teams.
• Conduct security due diligence for vendors and third parties: review security questionnaires, certifications, and technical controls to ensure they meet organizational requirements.
• Identify and track vendor risks, recommend mitigation measures, and support contractual security requirements where needed.
• Work with stakeholders to maintain and test business continuity and disaster recovery (BCP/DR) plans.
• Plan, coordinate, and document tabletop exercises and technical BCP/DR drills, track and follow up on corrective actions.
• Maintain up‑to‑date security policies, standards, procedures, and guidelines, ensuring alignment with NIST CSF, ISO 27001, and relevant regulations.
• Prepare regular reports and dashboards on audit findings, risk status, BCP drill outcomes, vendor risk posture, and ISMS/NIST CSF progress for management.
• Maintain and update the cyber risk register, working with control owners and business stakeholders to identify, assess, and prioritize risks.
• Perform risk assessments (likelihood/impact), propose risk treatment options (mitigate, accept, transfer, avoid), and track treatment plans to closure.
• Develop and deliver cyber security awareness sessions and targeted training for employees, including phishing awareness, secure handling of data, and role‑based security topics.
• Create clear, engaging communication materials (presentations, FAQs, quick guides) to improve security culture.

Cyber Risk Analyst

• Create and maintain security solutions on Enea client platforms
• Keep up to date with the telecoms threat landscape
• Analyse data collected from customer deployments to identify and investigate threats
• Provide security reviews for AdaptiveMobile clients; independently field client questions and manage client expectations
• Work on your own initiative, with minimal supervision, but with the support of a team lead and global team of analysts

Graduate Security Analyst

• Perform hands-on Application Security assessments including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and manual code reviews.
• Identify, analyze, and remediate vulnerabilities in web, mobile, and API applications (OWASP Top 10, API Security, etc.).
• Lead and support Software Supply Chain Security initiatives:
• Dependency vulnerability management
• SBOM (Software Bill of Materials) generation and analysis
• Secure CI/CD pipeline security
• Code signing, artifact repository security, and open-source risk assessment
• Conduct threat modeling for applications and integration points.
• Review and secure build pipelines, container images, and third-party libraries.
• Work closely with development, DevOps, and infrastructure teams to embed security into the SDLC.
• Monitor and triage security findings from various AppSec tools.
• Support Cloud Security posture reviews (basic knowledge required) – IAM, network security, and cloud misconfigurations.
• Prepare clear security reports, risk assessments, and remediation guidance for stakeholders.
• Stay updated with emerging threats in application security and software supply chain attacks (e.g., SolarWinds, Log4j, dependency confusion).

Information Security Analyst

Threat Intelligence Specialist

• Monitor a broad range of open source real-time risk events
• Analyze potential threats and risks and disseminate error-free reports to customers
• Make time-sensitive decisions regarding risk event reporting
• Implement operational processes and procedures
• Demonstrate advanced analysis and research skills
• Display good judgement and discretion in reporting
• Manage customer inquiries and interactions in an effective and professional manner
• Escalate issues to the appropriate parties
• Understand company’s mission, how our work impacts customers, and model company’s core values

Intelligence Analyst

• Monitor and investigate alerts across SIEM, XDR, IDS/IPS, and email security tools.
• Own incident response end-to-end: triage, containment, RCA, and reporting.
• Improve and maintain IR playbooks and runbooks.
• Run hypothesis-based threat hunts using TTPs, IOCs, and behavioral patterns.
• Bring OSINT and threat intel insights into daily SOC workflows.
• Monitor the dark web for leaked credentials and data exposure.
• Build and tune high-quality detections using MITRE ATT&CK.
• Enhance SIEM dashboards, correlation rules, and SOAR automations.
• Reduce false positives and improve SOC efficiency.
• Analyze network traffic, packet captures, and protocol behaviors.
• Investigate phishing attempts and strengthen email security.
• Onboard/validate log sources and ensure telemetry completeness.
• Purple teaming to validate detections and test defenses.

• Lead Incident Response efforts for corporate, cloud, and product environments, including investigation, containment, eradication, and recovery.
• Perform threat hunting across endpoints, networks, and cloud workloads to proactively identify indicators of compromise, emerging threats, and control gaps.
• Conduct cloud incident response for AWS, Azure, and GCP, and other cloud environments including Kubernetes and containerized workloads.
• Drive product security incident response, collaborating with engineering teams to analyze potential exposure to vulnerabilities.
• Perform digital forensics and malware analysis to support investigations.
• Develop and optimize security orchestration and automation playbooks.
• Provide guidance to engineering and business teams on secure design and contribute to security policies and metrics.

Cyber Security Analyst

• Assess the architecture, deployment, and fine-tuning of DLP solutions across Endpoint, Network, Email, communication tools, and Cloud channels.
• Provide mentorship on the configuration of DLP policies, IRM policies, rules, incident workflows, and response automation.
• Review and improve security controls across endpoints, cloud, DevSecOps, product, and identity systems.
• Define technical security requirements aligned with company policies.
• Coordinate the management of data discovery tools for structured and unstructured data environments, both on-premises and in the cloud.
• Manage data encryption solutions for data at rest, in transit, and in use.
• Review deployment and management of cloud-native data protection controls such as Defender for Cloud Apps, CASB, and CSPM.
• Assess enterprise PAM solutions to ensure the security of high-value credentials.
• Collaborate with SOC and IR teams to respond to data-related security incidents, perform root cause analysis, and improve rules to reduce false positives.
• Improve the speed and scope of architectural risk assessments by applying AI tooling to automate threat enumeration, generate attack scenarios, and streamline security control validation.
• Ensure system controls align with GDPR, HIPAA, PCI DSS, DPDP Act (India), ISO 27001, and internal policies.
• Provide clear and timely reporting on security controls for critical assets to senior leaders.
• Contribute to documentation for enterprise security solutions and processes including SOPs, runbooks, architectural diagrams, and policy standards.
• Stay ahead of emerging threats and technologies to strengthen security across the organization.

See all jobs on JobTailor

Information Security Analyst II

SAP Security Analyst

Senior Security Analyst

Security Analyst – Level 1

Cyber Risk Analyst

Graduate Security Analyst

Information Security Analyst

Intelligence Analyst

Information Security Analyst II

Cyber Security Analyst

Tech Lead, Cyber Risk Analyst