PURPOSE AND SCOPE:

India Cybersecurity Operation Center will assist in 24x7 Cyber Security Intrusion Monitoring and Event/Incident Response. Working with multiple IT Operations teams and members of the Information Security office, they will perform day-to-day security functions and investigations including more advanced analysis of threat intelligence and the security posture of systems. Manages and oversees systems to protect data from unauthorized access. Creates and implements policies and procedures for identifying, recording, and addressing security violations. Evaluates security systems and applications and suggests enhancements. Additional duties include gathering metrics and key performance indicators (KPI's) and other security related tasks.

PRINCIPAL DUTIES AND RESPONSIBILITIES:

• SOC Monitoring & Incident Response: Support a global 24x7 Security Operations Center by performing real-time security alert monitoring, initial triage, investigation, ticket management, and escalation of actionable incidents. Provide support to Incident Response activities in accordance with established processes and playbooks.
• Security Analysis & Threat Detection: Analyze and correlate security alerts, events, logs, vulnerabilities, and threat indicators. Demonstrate a good understanding of common cyber threats, attack techniques, malware, phishing, credential attacks, vulnerabilities, and basic security investigation methodologies.

·       Agentic AI & Machine Learning: Demonstrate a good understanding of Generative AI, Agentic AI, machine learning concepts, AI agents, LLMs, prompt engineering, and AI-driven security operations. Understand how AI/ML can be applied to security alert triage, threat detection, event correlation, anomaly detection, investigation assistance, automation, and security orchestration. Awareness of risks associated with AI systems, including prompt injection, data leakage, model manipulation, and adversarial attacks, is desirable.

·       Analytical & Continuous Improvement: Apply analytical and problem-solving skills to identify patterns, anomalies, and opportunities to improve SOC operations through AI/ML and automation. Maintain accurate investigation and ticket documentation, follow SOC procedures and SLAs, and collaborate effectively with global security teams in a 24x7 shift-based environment.

PHYSICAL DEMANDS AND WORKING CONDITIONS:

• The physical demands and work environmental characteristics described here are representative of those an employee encounters while performing the essential functions of this job.  Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

EDUCATION:

Minimum

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field

EXPERIENCE AND REQUIRED SKILLS:  

• Experience: 0–3 years of experience in cybersecurity, security operations, or IT administration roles. Programming and scripting experience is preferred.
• Communication: Strong written and verbal communication skills, with the ability to prepare and contribute to incident reports, technical documentation, and operational communications.
• Analytical Skills: Strong analytical, troubleshooting, and problem-solving skills, with the ability to investigate security events and identify relevant findings.
• Documentation & Attention to Detail: Strong documentation skills with a high level of accuracy and attention to detail when handling security incidents, tickets, and operational activities.
• Global Collaboration: Ability to work effectively with geographically distributed teams across different time zones in a collaborative and 24x7 operational environment.

This role requires a 5-day workweek with 2 days off. Aligns with AI based detection & response workstream within Security Operations Team.

Shift Timing: Willingness to work in a 24x7 rotational shift environment, including nights, weekends, and holidays. Eligible for shift allowance for night shift coverage.