ICC - Security Operations Analyst - Cyber Defense | IST Timezone
Pragmatike · Remote · India · Sri Lanka · Vietnam · Indonesia · Thailand ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote (India)
- 6-month contract
- Fluent English required
- SIEM & EDR focus
- Global 24/7 SOC
Join a major international organization as a Security Operations Analyst within a 24/7 global SOC. You will collaborate with cybersecurity specialists worldwide to monitor, investigate, and respond to threats across cloud, endpoint, network, and enterprise systems.
This hands-on position requires strong skills in alert triage, log analysis, and incident response using SIEM and EDR platforms. It is a six-month full-time contract with the possibility of extension, based in India but operating remotely.
What you'll do
- Triage and investigate security alerts via SIEM, EDR, and Microsoft tools
- Analyze host and network logs from diverse enterprise infrastructure
- Investigate suspicious activity to identify potential root causes
- Support incident response, remediation, and recovery efforts
- Determine escalation paths and coordinate with cybersecurity teams
- Improve detection quality and reduce false positives
- Prepare technical reports and maintain SOC documentation
What you'll need
- At least 5 years of IT or cybersecurity experience
- Hands-on experience with security alert triage and investigation
- Proficiency with SIEM and EDR platforms
- Strong log analysis skills for Windows, Linux, and enterprise systems
- Deep knowledge of Microsoft Security technologies
- Experience with Azure, AWS, or GCP cloud platforms
- Familiarity with Microsoft Sentinel, Splunk, QRadar, ArcSight, or ELK
- Experience with Microsoft Defender for Endpoint or CrowdStrike
- Fluent English with excellent communication skills
Nice to have
- Tier-1 or Tier-2 Incident Response experience
- AWS security monitoring across IaaS, PaaS, or SaaS
- Scripting skills in Python, PowerShell, Bash, or Ruby
- Certifications such as SC-200, GCIH, CEH, or GCFA
- Experience in a global SOC or distributed team
Stack
- Microsoft Sentinel
- Splunk
- QRadar
- ArcSight
- ELK
- Microsoft Defender for Endpoint
- CrowdStrike
- Azure
- AWS
- GCP
- Python
- PowerShell
- Bash
How you'll work
- Remote-first location in India
- Full-time contract duration
- Initial 6-month term with potential extension
- IST timezone alignment
- Part of a global 24/7 operation