About the Role The Security Analyst monitors and investigates security alerts to identify unwanted activity and security incidents, participating in the 24x7 security monitoring process. This onsite role in Hyderabad conducts forensic investigations, develops and improves security monitoring tools including SIEM and EDR, and supports ISO27001 and other technical compliance requirements. The ideal candidate is confident working independently in high-pressure environments and eager to learn and apply new skills. Key Responsibilities • Monitor and investigate security alerts to identify unwanted activity and security incidents. • Respond to suspicious activity reports and other security concerns raised across the company. • Conduct forensic investigations of security incidents and prepare incident reports. • Participate in the 24x7 security monitoring process. • Implement lessons learned from security incidents. • Develop and improve security monitoring tools, including SIEM and EDR. • Perform ad hoc coding for threat hunting, evidence analysis, and asset inventory collection. • Identify events relevant to security monitoring and prepare technical solutions to collect, store, and analyze them. • Contribute to Security Operations process improvement and review Incident Response policies and procedures. • Support ISO27001 and other technical compliance requirements within your area of responsibility. Key Skills • Strong understanding of Threat Assessment and proactive Threat Hunting using various security tools. • Solid understanding of the full cyber threat/attack lifecycle, including attack vectors, methods, and TTPs. • Confidence working in Linux environments, with knowledge of AWS, Azure AD, and Microsoft 365. • Ability to write clear, concise emails, memos, and incident reports for stakeholders and senior leadership. • Strong organizational skills and the ability to work independently with minimal supervision. • Aptitude for learning and applying new skills in high-pressure environments. Good to Have • Experience influencing colleagues to build and operate secure infrastructure correctly. • Exposure to compliance frameworks beyond ISO27001.