Deepwatch is seeking a highly motivated, self-driven technical analyst dedicated to protecting organizations against the world's most advanced attackers. Our Security Operations Center offers a unique approach to customer support, delivering an unparalleled experience within the industry. As an integral part of our global team based in India, you will play a pivotal role in understanding our customers' unique environments, needs, and challenges. You will partner closely with U.S.-based leadership and teams, ensuring continuous security operations and successful client outcomes across time zones.

In this role, you’ll get to:

• Support incident handling processes across multiple platforms and security technologies including Windows, Linux and macOS
• Provide in depth analysis from escalated requests originating from Security Analyst 1
• Validate suspicious events by performing investigations using SIEM and SOAR technologies, leveraging Deepwatch proprietary tooling, intelligence and OSINT, TTPs and IOCs
• Identify gaps in customer environments, data ingested or configuration errors which reduce telemetry quality
• Work with customer and leadership to surface and resolve concerns
• Provide support to Security Analyst I including coaching and training as necessary
• Leverage your knowledge of Alert Triage, SOC Operations, and Defense in Depth (DiD) to contribute to projects for overall customer success
• Produce high-quality written and verbal communications, recommendations, and findings to customer management in a timely manner
• Surface opportunities for improvement in the SOC and for the customer and be a change agent for measurably improving our customer security posture and experience
• Continue to sharpen your skills and capabilities on the job, and through the Deepwatch development program

To be successful in this role you’ll need:

• 3+ years of experience in cybersecurity or SOC environment
• 3+ years of hands-on experience with SIEM platforms, Splunk required (Google SecOps & Microsoft Sentinel preferred) with the ability to perform queries and leverage various log sources to perform investigations
• Proven ability to collaborate with global teams across time zones and partner with U.S.-based leadership to ensure continuous security operations.
• Proven experience in incident response and threat hunting
• Experience with endpoint detection and response (EDR) tools, email security and cloud identity platforms
• A strong understanding of cyber security principles, concepts and practices including the ability to perform a complete and thorough incident investigation and triage autonomously with limited support from Analyst III’s
• Competency with in-depth header analysis, hashes and Windows/macOS/Linux logs
• Demonstrate the ability to pivot to other log sources, cloud systems or consoles to perform a comprehensive analysis from multiple data sources.
• A desire to support others and uplift the program and team through revising training documentation and standard operating procedures (SOPs)
• Excellent written and verbal communication skills
• Ensure customers receive a thorough and comprehensive breakdown of incident investigations.
• Preferred Certifications: GSEC, GCIH, SSCP, CySA+, SecurityX

Why Deepwatch?

• Mission-driven company focused on protecting customers from threats 24/7
• Hybrid work model in India, with access to collaborative office space in Bangalore
• High-impact leadership role with strong visibility across Product & Engineering
• Competitive compensation, equity, and benefits
• A company recognized as a Great Place to Work® for five consecutive years
• Opportunity to shape the future of cybersecurity and AI-driven platforms