Cybersecurity Analyst

It's fun to work in a company where people truly BELIEVE in what they're doing!
We're committed to bringing passion and customer focus to the business.

Location: Remote – Anywhere in India

Work Schedule: Monday to Friday

Work Arrangement: Fully Remote

Experience: 5-8 Years

We are seeking an Information Security Analyst with 3–5 years of experience across security operations, vulnerability management, and governance, risk, and compliance (GRC). The ideal candidate will have hands-on experience with security monitoring tools, incident response, and security frameworks such as SOC 2 Type II and NIST CSF.

This is a fully remote opportunity open to candidates based anywhere in India, with a Monday-to-Friday work schedule. The role involves strengthening the organization's security posture, supporting compliance initiatives, identifying and mitigating security risks, and collaborating with cross-functional teams to implement effective security practices.

• Monitor, tune, and triage security alerts across SIEM platforms, escalating confirmed incidents in accordance with established procedures and runbooks.
• Manage the vulnerability management lifecycle, including scanning, risk-based prioritization, remediation tracking, and management reporting.
• Support endpoint security, email security, and network monitoring tools, identifying security gaps and recommending configuration improvements.
• Conduct periodic threat-hunting activities and contribute to the development and enhancement of detection rules and incident response playbooks.
• Participate in incident response activities, including containment, eradication, recovery, and post-incident reviews.

• Support ongoing SOC 2 Type II compliance activities, including evidence collection, control testing, documentation, and coordination with external auditors.
• Assist with NIST Cybersecurity Framework (NIST CSF) assessments by mapping existing controls to framework requirements, identifying gaps, and supporting remediation efforts.
• Maintain and update information security policies, standards, and procedures in collaboration with senior team members.
• Conduct periodic security risk assessments and document findings in the organization's risk register.
• Track identified risks, control deficiencies, and remediation actions through to closure.

• Collaborate with IT, Engineering, and business stakeholders to integrate security best practices into day-to-day operations.
• Support security awareness initiatives and provide guidance to employees on information security policies and practices.
• Prepare clear and concise reports on security metrics, vulnerability status, risk remediation, and compliance posture for management.
• Communicate technical findings, security risks, and recommended corrective actions effectively to both technical and non-technical stakeholders.

• 5-8 years of experience in information security, with exposure to both technical security operations and compliance functions.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, or equivalent solutions.
• Working knowledge of vulnerability management tools such as Tenable Nessus, , or Qualys.
• Understanding of SOC 2 Trust Services Criteria and the NIST Cybersecurity Framework.
• Familiarity with common cyberattack techniques, threat detection methods, and defensive security controls. Knowledge of MITRE ATT&CK is an advantage.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to work independently and collaboratively in a cross-functional environment.
• Excellent written and verbal communication skills, with the ability to explain technical findings to non-technical audiences.

• Relevant certifications such as CompTIA Security+, CompTIA CySA+, CEH, CISM, or equivalent.
• Experience supporting SOC 2 audits from preparation and evidence collection through audit completion.
• Scripting or automation experience using Python or PowerShell for security tooling, analysis, and reporting.
• Exposure to cloud security environments, including AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Experience with GRC platforms such as Archer, ServiceNow GRC, Drata, or Vanta.

Originally posted on Himalayas