Lead Information Security Analyst (Individual Contributor)

About the role

The Lead Information Security Analyst is a senior, hands-on security operations professional who directs the day-to-day work of threat detection, alert triage, and incident response within the Security Operations Center (SOC). The role combines deep technical expertise with technical and shift leadership to ensure consistent analyst performance, high-quality investigations, and reliable operational outcomes.

What you'll do

• Lead alert triage and event analysis across SIEM, EDR/XDR, cloud, and identity telemetry; manage alert queues, escalations, and SLAs
• Investigate and contain complex, high-severity incidents (Tier 2/3) as technical lead or incident commander
• Develop and tune detection content, produce IOCs/IOAs, and support threat hunting mapped to MITRE ATT&CK to improve coverage and reduce false positives
• Operate and improve SOC tooling and automation (SIEM/SOAR), maintain metrics and dashboards, and support vulnerability remediation and cloud/on-prem reviews
• Uphold security standards, compliance, and audit requirements, and mentor analysts while driving awareness, training, and post-incident improvements

What you need

• 6–9 years in cybersecurity
• Incident response
• SIEM
• Vulnerability assessment
• EDR
• Cloud security
• IAM
• B.Tech or B.E. or B.Sc or BCA or M.Tech or MCA or M.Sc

Good to have

• CISSP
• CISM
• Python
• AWS
• GCP
• Azure