About the Role

We are seeking a highly skilled Security Analyst (Level 2) to join our MSSP SOC team. The ideal candidate will have expertise in SIEM (Splunk, QRadar), XDR/EDR solutions, and security analysis with hands-on experience in investigating and responding to security alerts. This role requires proficiency in reviewing and analyzing Level 1 alerts, providing detailed recommendations, and engaging with customers for incident handling. The candidate should also have basic SIEM administration knowledge and Python scripting skills for troubleshooting and playbook development.

Key Responsibilities

• Threat Detection & Response: Analyze and investigate security alerts, events, and incidents generated by SIEM, XDR, and EDR solutions.
• Incident Investigation & Handling: Conduct in-depth security incident investigations, assess impact, and take appropriate actions. 
• Incident Escalation & Communication: Escalate critical incidents to Level 3 analysts or senior security teams while maintaining detailed documentation.
• Content Management: Develop and fine-tune correlation rules, use cases, and alerts in SIEM/XDR platforms to improve detection accuracy.
• Malware Analysis: Perform basic malware analysis and forensic investigation to assess threats.
• Customer Request Handling: Collaborate with customers to address security concerns, provide recommendations, and respond to inquiries.
• SIEM Administration: Assist in the administration and maintenance of SIEM tools like Splunk or QRadar, ensuring smooth operations.
• Automation & Playbooks: Utilize Python scripting for automation, troubleshooting, and playbook development to enhance SOC efficiency.
• Reporting & Documentation: Prepare detailed reports on security incidents, trends, and mitigation strategies. 

Basic Qualifications

• B.E/B. Tech degree in computer science, Information Technology, Masters in Cybersecurity
• 3+ years of experience in a SOC or cybersecurity operations role.
• Strong knowledge of SIEM tools (Splunk, QRadar) and XDR/EDR solutions.
• Hands-on experience in threat detection, security monitoring, and incident response.
• Knowledge of network security, intrusion detection, malware analysis, and forensics.
• Basic experience in SIEM administration (log ingestion, rule creation, dashboard management).
• Proficiency in Python scripting for automation and playbook development.
• Good understanding of MITRE ATT&CK framework, security frameworks (NIST, ISO 27001), and threat intelligence.
• Strong analytical, problem-solving, and communication skills.
• Ability to work in a 24x7 SOC environment (if applicable)

Preferred Qualifications

• Certified SOC Analyst (CSA)
• Certified Incident Handler (GCIH, ECIH)
• Splunk Certified Admin / QRadar Certified Analyst
• CompTIA Security+ / CEH / CISSP (preferred but not mandatory

About the Role

We are seeking a Data Governance & AI Trust Manager to define and operationalize the governance framework that enables high‑quality, well‑governed data to safely and effectively power GenAI agents, copilots, and analytics across the company.

As the organization accelerates adoption of Generative AI, the quality, structure, provenance, and clarity of corporate operating data have become critical enablers of AI performance, trustworthiness, and value. This role exists to ensure that the company’s operating data ecosystem is intentionally designed, consistently governed, and fit for AI‑enabled use cases, rather than fragmented, ambiguous, or ad‑hoc.

This role reports to the CISO & CIO and operates as a cross‑functional data governance authority across all company content. It does not own or manage the data itself; content ownership remains with business and platform owners. Instead, this role defines the standards, policies, and operating expectations under which data is created, managed, shared, retained, and made eligible for analytics and GenAI use.

A core responsibility of the role is to set the vision for the company’s internal data ecosystem—including how platforms such as SharePoint, Confluence, Jira, Slack, Teams, and related systems should be used together—and to establish clear operational standards (for example, when content belongs in SharePoint versus Confluence, and how that decision impacts AI use).

Governance is expected to be operationalized through native platform controls and existing enterprise tooling, rather than through standalone or heavyweight governance systems. The role translates governance principles into practical, enforceable standards that improve data quality, reduce ambiguity, and materially improve GenAI outcomes.

This is not a traditional data engineering or compliance analyst role. Success requires strong program ownership, the ability to drive cross‑functional alignment without direct authority, and sound judgment at the intersection of data quality, AI trust, security, and business operations.

Your Day‑to‑Day

Governance Framework Design & Ownership

• Own and evolve the company’s Corporate Operating Data Governance framework
• Define governance standards for unstructured and semi‑structured data across collaboration and productivity platforms
• Establish clear ownership models (Data Owners, Data Stewards, Custodians) for operating data domains
• Ensure governance practices enable business velocity rather than obstruct it
• Operationalize governance through native platform capabilities (e.g., metadata, permissions, retention, labeling, workflows) rather than standalone governance tooling

Metadata, Classification & AI Eligibility

• Define and maintain metadata standards, including:
  • Data classification
  • Purpose of use
  • Lifecycle state
  • AI eligibility and exclusion rules
• Partner with Security and Legal to ensure alignment with privacy, regulatory, and contractual obligations
• Embed metadata and classification standards directly into existing platforms rather than creating parallel systems

Data Quality & Trustworthiness

• Establish fitness‑for‑purpose data quality expectations for corporate operating data
• Define quality signals for:
  • Accuracy
  • Completeness
  • Timeliness
  • Consistency
• Partner with business teams to identify high‑risk or high‑impact data domains
• Ensure AI‑enabled experiences are grounded in authoritative, explainable, and traceable data sources

Lifecycle, Retention & Risk Management

• Define lifecycle expectations for operating data, including creation, maintenance, archival, and deletion
• Coordinate retention and defensibility standards to support legal, compliance, and audit needs
• Reduce long‑term risk from unmanaged or over‑retained unstructured data
• Support eDiscovery and investigation readiness through clarity and traceability

Cross‑Functional Execution & Enablement

• Drive accountability across Product, Engineering, Security, Legal, IT, and Business teams
• Establish practical governance cadences, reporting, and decision forums
• Provide authoritative guidance and operating standards while enabling teams with clear, pragmatic direction
• Foster a data‑aware and AI‑responsible culture through enablement and education rather than enforcement alone

What You Bring to the Team

• 6+ years of experience in data governance, data management, AI governance, security, or related operational leadership roles
• Experience governing unstructured or operational data (e.g., collaboration platforms, knowledge systems, document repositories)
• Strong understanding of data quality concepts and lifecycle management
• Familiarity with AI risk considerations including data provenance, bias, privacy, and misuse
• Demonstrated ability to drive cross‑functional execution without direct authority
• Excellent written and verbal communication skills for executive and technical audiences
• Sound judgment balancing governance rigor with business pragmatism
• High degree of ownership and follow‑through

What We’d Like to See (Not Required)

• Experience supporting AI governance, AI enablement, or responsible AI initiatives
• Exposure to regulated environments (HIPAA, HITRUST, SOC 2, GovRAMP, or similar)
• Familiarity with collaboration platforms such as Jira, Confluence, Slack, and Microsoft 365
• Experience partnering closely with Security, Legal, or Risk teams
• SaaS or data‑platform operating environment experience

What you’ll get in return 

• Competitive Leave & Benefits
• Comprehensive health coverage
• Equity for every employee – share in our success
• Growth-focused environment – your development matters here

Work arrangements 

• Standard hours: 8 hours/day, 5 days/week
• Location: Pune, Hybrid (3 days a week in office)
• Shift: 12pm-9pm IST

• Provides support to the Security Services team, with a high attention to detail

•• Researches, analyzes, and documents findings•• Assists with the analysis of events generated from IDS, log-based alerts, SIEM alerting, and endpoint detection tools

•• Monitors multiple cybersecurity systems for breaches, suspicious, or malicious activity

•• Assists with SIEM rule modification, notification pathways, and other system configuration management

•• Analyzes process workflows and identifies problems

•• Works with colleagues to understand processes and deliverables across the organization

•• Adheres to relevant policies, procedures, standards, and security practices

•• Delivers and prioritizes customers satisfaction

•• Aids and facilitates partner communications, resolutions, and escalations

•• Follows escalation procedures for interfacing with other SOC teams 

Mandatory Skills: SIEM, EDR, Log analysis, Threat Triage

Experience: 1 Years to 2 Years

Notice Period: Max 1 Month

Work Location: Pune

Shifts: Rotational