350 Cybersecurity Analyst jobs in Mumbai

Key Responsibilities:

• Monitor and respond to security alerts from EDR/XDR platforms such as SentinelOne.
• Perform in-depth threat analysis and triage incidents to determine severity and impact.
• Implement and maintain endpoint security solutions across the organization.
• Conduct proactive threat hunting and behavioral analysis using EDR and XDR tools.
• Collaborate with the SOC team and IT to ensure timely containment, eradication, and recovery from security incidents.
• Document incident findings and assist with post-incident reporting and root cause analysis.
• Maintain compliance with internal security policies and regulatory requirements.
• Recommend improvements in security posture based on threat trends and vulnerability assessments.

Required Skills & Qualifications:

• Bachelor's degree in Computer Science, IT, Cybersecurity, or related field.
• 3+ years of hands-on experience with EDR/XDR solutions (SentinelOne preferred).
• Strong understanding of endpoint protection, threat detection, and incident response methodologies.
• Familiarity with MITRE ATT&CK framework and threat intelligence principles.
• Ability to analyze logs, endpoint telemetry, and network data to identify threats.
• Experience with SIEM tools (e.g., Splunk, QRadar, or similar) is a plus.
• Excellent analytical, communication, and problem-solving skills.

• Monitor security alerts and events from various security tools (SIEM, IDS/IPS, firewalls, etc.).
• Analyze security incidents, identify root causes, and develop remediation plans.
• Conduct vulnerability assessments and penetration testing to identify system weaknesses.
• Implement and manage security controls and technologies to protect networks and data.
• Develop and maintain security policies, procedures, and documentation.
• Respond to and manage security incidents, including containment, eradication, and recovery.
• Conduct security awareness training for employees.
• Stay up-to-date with the latest cybersecurity threats, vulnerabilities, and mitigation techniques.
• Collaborate with IT teams to ensure security best practices are integrated into all systems and applications.
• Assist in the development and testing of disaster recovery and business continuity plans.
• Participate in security audits and compliance checks.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 3+ years of experience in cybersecurity operations or a related IT security role.
• Strong knowledge of network security principles, protocols, and technologies.
• Experience with SIEM tools (e.g., Splunk, QRadar, ArcSight).
• Familiarity with intrusion detection/prevention systems (IDS/IPS) and firewalls.
• Understanding of vulnerability scanning tools (e.g., Nessus, Qualys).
• Knowledge of incident response methodologies and best practices.
• Relevant security certifications such as CompTIA Security+, CISSP, CEH are highly desirable.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration abilities.
• Ability to work independently and manage time effectively in a remote setting.

• Monitor security systems and networks for potential threats and vulnerabilities.
• Investigate and respond to security incidents, including malware outbreaks, intrusions, and denial-of-service attacks.
• Analyze security logs and alerts to identify suspicious activity.
• Implement and manage security controls and technologies, such as firewalls, intrusion detection/prevention systems (IDS/IPS), and antivirus software.
• Conduct vulnerability assessments and penetration testing to identify weaknesses.
• Develop and update security policies, procedures, and guidelines.
• Stay current with the latest cybersecurity threats, trends, and best practices.
• Educate employees on security awareness and best practices.
• Participate in security audits and compliance initiatives.
• Collaborate with IT teams to ensure systems are configured securely.
• Develop incident response plans and conduct tabletop exercises.
• Perform risk assessments and recommend mitigation strategies.
• Manage security tools and platforms, ensuring they are up-to-date and effective.
• Document security incidents and resolutions comprehensively.
• Provide technical support and guidance on cybersecurity matters.
• Assist in the development and implementation of security awareness training programs.
• Monitor the effectiveness of security controls and recommend improvements.
• Research emerging security threats and technologies.
• Contribute to the continuous improvement of the organization's security posture.
• Ensure compliance with relevant data protection regulations.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 5 years of experience in cybersecurity analysis or a related security role.
• Proven experience with security information and event management (SIEM) tools.
• Knowledge of network security, vulnerability management, and incident response.
• Familiarity with common cybersecurity frameworks (e.g., NIST, ISO 27001).
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills.
• Relevant cybersecurity certifications (e.g., CISSP, CEH, CompTIA Security+) are highly desirable.
• Experience working within the financial sector in **Mumbai, Maharashtra, IN** is a plus.
• Ability to work effectively both independently and as part of a team.
• Willingness to work flexible hours and be on-call as needed.
• Proactive mindset towards identifying and mitigating security risks.

Job responsibilities

• Manages system patches, Anti-Virus updates and perform backups and restoration for the installed OT assets.
• Review firewall and other relevant security logs for identification of threats, anomalies, intrusions and/or abnormal connection behaviour. Investigates, reports and escalates issues as required to Cybersecurity staff and management.
• Troubleshoots network performance or network security issues. Analyses network traffic, responds to problem tickets and resolves service requests.
• Participates in incident response, computer forensics, data preservation and investigations related to network breaches and/or unauthorized access of data.
• Supports regular and special reporting and analysis, including reports of vulnerabilities, risks, control deficiencies, remediation strategies, and performance metrics.
• Configures and tests Cybersecurity related technologies. Troubleshoots and corrects Cybersecurity and data related problems.
• Performs hardware and software upgrades and documents configurations and system specifications.
• Helps maintain configuration records and documentation, including security operations and maintenance, incident control, cyber incident response procedures, and other standards, policies, and procedures.
• Provides security related technical support to users and assists with the research, evaluation, and implementation of security tools, systems, and processes.
• Reviews external threat intelligence feeds from cybersecurity agencies; sends alerts and coordinates with responsible parties to patch high risk vulnerabilities
• Maintains, monitors, and modifies security tools, systems and processes according to standard and department policies and procedures.
• Supports the implementation of effective key service platforms, including on-premises physical and virtual cloud environments.
• Maintains an active culture of Cybersecurity awareness within the organization.
• Assists with audit and compliance responsibilities for both internal and external audit requirements.
• Note: This is a hands-on position with considerable field work in an industrial, 7x24 Petrochemical manufacturing environment.

Education

• Required (Qualification / Discipline): Graduate Degree in Engineering/ Computer Science / IT/ Electrical / Instrument / Automation / Mechatronics / Cybersecurity/ Electronics or equivalent discipline.
• Or subject to COMPANY approval
• Required (Qualification / Discipline): 3 Years Diploma in Engineering/ Computer Science / Electrical / Instrument / Automation / Mechatronics / Cybersecurity/ Electronics or equivalent discipline with 10+ years' experience in Petrochemicals plant.

Experience

• Required (Years / Job Level / Industry): 5+ years' experience within Oil & Gas or Chemical facility with focus in ICS/OT Cybersecurity.
• Preferred (Years / Job Level / Industry): 7+ years' experience within Oil & Gas or Chemical facility with focus in ICS/OT Cybersecurity.

Preferred Skills

• CCNA/Network+ certified
• CISM/IEC-62443 certified
• CEH/CompTIA Security+/CySA+ certified
• At least 1 Cybersecurity Certification is desirable
• Experience in Oil & Gas or chemical manufacturing environments
• Experience in bare metal hypervisor based on MS Hyper V with Hyper Converged Infrastructure (HCI)
• Excellent communication and interpersonal skills

Job Type: Full-time

Pay: ₹2,500, ₹4,000,000.00 per year

Benefits:

• Cell phone reimbursement
• Flexible schedule
• Food provided
• Health insurance
• Internet reimbursement
• Leave encashment
• Life insurance
• Paid sick time
• Paid time off
• Provident Fund

Work Location: In person

• Monitor security systems and analyze alerts for potential threats.
• Conduct in-depth investigations of security incidents and breaches.
• Develop, implement, and enforce cybersecurity policies and procedures.
• Lead threat hunting operations and vulnerability assessments.
• Design and maintain incident response plans.
• Provide expert guidance on network security, data protection, and access control.
• Stay current with emerging cybersecurity threats, trends, and technologies.
• Collaborate with IT teams on security architecture and control implementation.
• Educate staff on cybersecurity best practices and awareness.

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• Minimum of 7-10 years of experience in cybersecurity, with a focus on security analysis and operations.
• In-depth knowledge of security principles, frameworks, and technologies (e.g., SIEM, IDS/IPS, firewalls, EDR).
• Experience with threat intelligence platforms and incident response methodologies.
• Strong analytical, problem-solving, and critical thinking skills.
• Excellent communication and presentation skills.
• Relevant certifications such as CISSP, CISM, or GIAC are highly desirable.
• Proven ability to work effectively in a fully remote environment.

• Design, implement, and manage comprehensive cybersecurity programs and controls.
• Monitor security alerts and events using SIEM tools to detect and respond to potential threats.
• Conduct thorough vulnerability assessments and penetration tests to identify and remediate security weaknesses.
• Develop and execute incident response plans to effectively manage security breaches.
• Collaborate with IT and development teams to integrate security into the software development lifecycle (SDLC).
• Stay current with the latest cybersecurity threats, vulnerabilities, and mitigation strategies.
• Provide expert guidance and mentorship to junior cybersecurity personnel.
• Develop and deliver security awareness training to employees.
• Maintain and enhance security policies, standards, and procedures.
• Evaluate and recommend new security technologies and solutions.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field. Master's degree preferred.
• 5+ years of progressive experience in cybersecurity roles.
• In-depth knowledge of network security, endpoint security, cloud security (AWS, Azure, GCP), and data protection.
• Experience with SIEM platforms, vulnerability scanners, and penetration testing tools.
• Proficiency in scripting languages (e.g., Python, PowerShell) is a plus.
• Relevant certifications such as CISSP, CISM, CEH are highly valued.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong communication and interpersonal skills, with the ability to explain complex technical concepts to non-technical audiences.
• Demonstrated ability to work independently and collaboratively in a remote setting.

• Monitor security systems and networks for potential threats and vulnerabilities.
• Analyze security alerts and events to identify and respond to incidents.
• Conduct vulnerability assessments and penetration testing.
• Develop and implement security policies and procedures.
• Investigate security breaches and provide detailed incident reports.
• Stay abreast of the latest cybersecurity trends, threats, and technologies.
• Implement and manage security tools, such as firewalls, intrusion detection systems (IDS), and antivirus software.
• Provide security awareness training to employees.
• Collaborate with IT teams to ensure the security of systems and applications.
• Develop and maintain incident response plans.
• Perform regular security audits and compliance checks.
• Recommend and implement security improvements.
• Manage security risks and ensure compliance with relevant regulations.
• Assist in the development of security architecture.
• Respond to security-related inquiries from internal stakeholders.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Professional certifications such as CISSP, CompTIA Security+, or CEH are highly desirable.
• Minimum of 3 years of experience in cybersecurity or a related IT security role.
• Proven experience with security monitoring tools, SIEM platforms, and vulnerability assessment tools.
• Strong understanding of network security, endpoint security, and data security principles.
• Excellent analytical, problem-solving, and critical-thinking skills.
• Ability to work independently and manage multiple priorities in a remote environment.
• Strong communication and interpersonal skills for effective virtual collaboration.
• Experience with incident response and forensic analysis is a plus.
• Knowledge of cloud security best practices.
• Familiarity with relevant compliance frameworks (e.g., ISO 27001, GDPR).