ICC - Security Operations Analyst - Cyber Defense | IST Timezone
About this job
Pragmatike is hiring a Security Operations Analyst on behalf of a major international organization to join a global 24/7 Cybersecurity Operations Centre. In this remote-first role, you will collaborate with cybersecurity specialists across various regions to protect enterprise environments. Your team focuses on safeguarding cloud, endpoint, network, and overall enterprise infrastructure against potential cyber threats. A normal day involves monitoring, triaging, and investigating security alerts using SIEM, EDR, and cloud platforms. You will analyze host and network logs, look into suspicious activity, determine root causes, and support incident response and recovery. Additionally, you will help improve detection quality, tune whitelists, prepare technical reports, and maintain SOC documentation to ensure operational readiness.
Responsibilities
- Monitor, triage, and investigate security alerts across SIEM, EDR, and cloud platforms.
- Analyze host and network logs from various operating systems, databases, and network devices.
- Support incident response, remediation, and recovery activities with specialist teams.
- Determine escalation paths and coordinate with relevant cybersecurity groups.
- Improve detection quality, reduce false positives, and support whitelist tuning.
- Prepare technical reports, summaries, and security findings.
- Maintain SOC documentation, procedures, and knowledge-base content.
Requirements
- 5+ years of relevant IT/cybersecurity experience.
- Hands-on experience with security alert triage and incident investigation.
- Working experience with SIEM and EDR platforms.
- Strong log analysis skills across Windows and Linux infrastructure.
- Deep knowledge of Microsoft Security technologies.
- Experience with Azure, AWS, and/or GCP.
- Fluent English with strong written and verbal communication skills.
Good to have
- Tier-1/Tier-2 Incident Response experience.
- AWS security monitoring experience across IaaS, PaaS, or SaaS.
- Scripting experience with Python, PowerShell, Bash, or Ruby.
- Relevant certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA, or MCSE.
- Experience working in a global SOC or distributed cybersecurity team.
Who should apply
This role suits experienced security professionals who have a solid background in IT and cybersecurity operations. Candidates must have extensive experience in log analysis, alert triage, and working with major SIEM and EDR platforms. Since the position requires fluent English and collaboration with a globally distributed team, strong communication skills are essential. This opportunity is designed for individuals with several years of industry experience, so freshers are not applicable for this specific posting.
Frequently asked questions
What is the primary role of the Security Operations Analyst at pragmatike?
The Security Operations Analyst monitors, detects, investigates, and responds to cyber threats across cloud, endpoint, network, and enterprise environments within a global 24/7 Cybersecurity Operations Centre.
How many years of experience are required for the Security Operations Analyst position?
The posting requires 5+ years of relevant IT and cybersecurity experience.
Is the pragmatike Security Operations Analyst position remote?
Yes, the role is remote-first and based in India.
What platforms and tools will I work with as a Security Operations Analyst at pragmatike?
You will work with SIEM platforms like Microsoft Sentinel, Splunk, QRadar, ArcSight, or ELK, EDR solutions like Microsoft Defender for Endpoint or CrowdStrike, Microsoft security tools, and major cloud platforms such as Azure, AWS, and GCP.
Rojgar Point lists this job for information. Always apply on the official company page and never pay anyone for a job.