What Jobs are available for Security Analyst in India?

Job Details:

Experience: 5 Years

Work Location: Chennai

Work Mode: Hybrid

Roles and Responsibilities:

• 5–7 years of hands-on experience in VAPT, preferably in both application and infrastructure testing.
• Perform manual verification and risk assessment of identified vulnerabilities.
• Track and validate remediation efforts in collaboration with IT and application teams.
• Execute black-box, grey-box, and white-box penetration tests on web applications, APIs, internal systems, external networks, and mobile apps.
• Exploit vulnerabilities in controlled environments to assess real-world risks.
• Simulate advanced threat actor behaviours and pivot through environments for lateral movement analysis.
• Review application architecture and code (static/dynamic analysis) for security issues.
• Work with DevOps and engineering teams to ensure secure SDLC practices are followed.
• Conduct threat modelling and provide recommendations during design and development phases.
• Prepare detailed reports with evidence of vulnerabilities, risk ratings, exploit techniques, and remediation guidance.
• Present findings to both technical and non-technical stakeholders.
• Maintain documentation of test plans, procedures, and assessment tools.
• Solid knowledge of OWASP Top 10, SANS 25, and CVSS scoring.
• Burp Suite, Metasploit, Nmap, Wireshark, Nikto, Hydra, and SQLmap SAST/DAST platforms like Fortify or Veracode
• Proficiency in scripting (Python, Bash, or PowerShell) to build or extend tools.
• Strong understanding of TCP/IP, firewalls, IDS/IPS, and network protocols.
• Familiarity with cloud security (AWS, Azure, or GCP).

• Deep technical expertise in Endpoint security technology domain with demonstrated expertise in one or more of the following areas – EDR, HIPS, Anti-Malware, FIM, Server Protection
• Proven experience in maintaining endpoint security solutions across enterprise environments.
• Provide compliance reports (monthly and based on need)
• Performing analysis of end-point security needs that contribute to the design, integration, and installation of hardware and software.
• Analysis, troubleshooting and development of solutions to end-point security problems.
• Excellent troubleshooting skills
• Creation of SOPs for daily operations of endpoint security tools and services
• Monitoring security advisory groups to ensure all necessary security updates, patches and preventive measures are in place.
• Support forensics activates and requirements.
• Good soft skills and multi-tasking abilities

Company : TCS

Skill : Sailpoint Developer

Experience : 10+ Years

Location : PAN India

Job Description :

• Sailpoint identity engineer certification
• Minimum 8+ Years of Experience on Sailpoint IIQ product, java and Angular
• In-Depth knowledge of Sailpoint Integration with 3rd party tools.
• DevOps skills and ability to deploy the functionality into CI/CD pipelines
• Advanced SQL knowledge is highly desirable
• Ability to negotiate and allocate resources appropriately for development and implementation

Join Verdantas – A Top #ENR 81 Firm,

We at Verdantas are seeking a highly motivated and detail-oriented Information Security Analyst, to protect our company’s critical systems and sensitive data. You will be an integral part of our security team, responsible for implementing, maintaining, and monitoring our security posture. The ideal candidate will have a strong technical background, a proactive mindset, and a passion for staying ahead of the latest security trends and threats.

Key Responsibilities

Security Operations & Monitoring:

• Monitor security alerts from SIEM, IDS/IPS, firewalls, and other security tools to identify and investigate potential security incidents.
• Perform vulnerability scans and assessments, prioritizing and tracking remediation efforts.
• Manage and configure security tools, including EDR/XDR, antivirus, and email security gateways.
• Conduct log analysis and forensic investigations to determine the root cause of security events.

Incident Response:

• Serve as a key member of the incident response team.
• Respond to and mitigate security incidents in a timely and effective manner.
• Document incidents and develop runbooks for future reference.

Security Architecture & Engineering:

• Design, implement, and maintain security controls and technologies to protect cloud (e.g., AWS, Azure, GCP) and on-premises infrastructure.
• Implement and manage identity and access management (IAM) policies and practices.
• Harden systems, networks, and applications based on industry best practices (e.g., CIS Benchmarks).
• Assist in the development and enforcement of security policies, standards, and procedures.

Governance, Risk, and Compliance (GRC):

• Participate in risk assessments and audits (e.g., SOC 2, ISO 27001, PCI-DSS, HIPAA).
• Assist in third-party security risk assessments.
• Promote security awareness across the organization through training and communication.

Required Qualifications & Skills

• Bachelor’s degree in computer science, Information Security, or a related field, or equivalent experience.
• (8+) years of experience in an information security role.
• Hands-on experience with core security technologies (SIEM, EDR, Firewalls, IDS/IPS, DLP).
• Strong understanding of networking protocols (TCP/IP, DNS, HTTP/S) and network security.
• Knowledge of operating systems (Windows, Linux, macOS) and their security aspects.
• Familiarity with cloud security principles (AWS, Azure, or GCP).
• Understanding of common attack vectors, malware, and threat actor tactics (e.g., MITRE ATT&CK framework).
• Excellent problem-solving and analytical skills.
• Strong written and verbal communication skills.

Preferred Qualifications & Skills

• Relevant industry certifications such as:
• Entry-Level: Security+, GIAC GSEC
• Mid-Level: CISSP, CISM, CEH, CompTIA CySA+
• Cloud-Specific: CCSP, AWS Certified Security - Specialty, Azure Security Engineer Associate
• Experience with scripting languages (e.g., Python, PowerShell, Bash) for automation.
• Knowledge of application security (SAST, DAST) and secure SDLC practices.
• Experience with penetration testing or red teaming tools and methodologies.
• Prior experience in a regulated industry (finance, healthcare, etc.)

Hi All,

Good afternoon!

We are urgently hiring for the role of Information Security Analyst with 7 to 12 years of experience with below required skills :

• Global Security operations center
• SIEM tools
• Splunk
• Incident Management

Interested candidates please apply on :

About the company

Lexitas is a high growth company. The Company is built on a belief that having strong personal relationships with our clients, and providing reliable, accurate and professional services, is the driving force of our success.

Lexitas offers an array of services including local and national court reporting, medical record retrieval, process service, registered agent services and legal talent outsourcing. Our reach is truly national as well as international.

Lexitas is a MNC Company that has set up a subsidiary in Chennai, India – Lexitas India Pvt. Ltd. This Indian company will be the Lexitas Global Capability Center, helping build a world class IT development team, and over time serve as a Shared Services hub for several of the corporate functions.

For More Information -

This is a Full-Time Job located in Chennai, India.

Summary:

This position supports information security, privacy, risk and compliance programs and activities under the direction of the VP of Information Security or designated Information Security Manager. The position assists in developing and maintaining a comprehensive security program for Lexitas. Providing functional and technical support is important to maintain security posture and protection of electronically and physically stored information assets across our systems. Tasks include supporting design, implementation, configuration, documentation, and maintenance to mitigate risk to the business and its computing resources and assets, as well as collaborating with applicable providers, managing and monitoring tools, and facilitating applicable processes and procedures.

Key Roles and Responsibilities :

• Supports IT security, privacy, risk and compliance systems, processes, supporting activities, with the ability to lead activities and programs.
• Monitors computer networks and associated tools and provider services for security, privacy, risk and compliance issues
• Supports the project management, tracking, and documentation of Information, Privacy, Risk, and Compliance programs, processes, and activities
• Investigate security breaches and cybersecurity incidents.
• Documents security breaches and assesses impact.
• Performs and/or supports security tests, risk assessments, and audits to uncover network, application, and process vulnerabilities and provides guidance and training to ensure violations do not persist.
• Tracks and facilitates the mitigation of vulnerabilities to maintain a high security standard.
• Supports best practices for IT security, privacy and compliance.
• Performs and supports 3rd party vulnerability management and penetration testing.
• Research security enhancements and makes recommendations to management.
• Stays current on information technology trends and security standards.
• Prepares reports that detail security, privacy, and compliance risk assessment findings.
• Supports Security Operations Center functions including monitoring and supporting Incident Response activities.
• Supports all related IT Security, Privacy, Risk and Compliance policies and provides guidance to the business.
• Other Information Security, Privacy, Risk, and Compliance duties as required.

Skills and Abilities:

• Experience with computer network and application vulnerability management and penetration testing, and techniques.
• Solid understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts
• Ability to identify and mitigate network and application vulnerabilities.
• Good understanding of patch management
• Proficient with various OS
• Excellent written and verbal communication skills
• Knowledge of firewalls, antivirus, and intrusion detection system concepts
• Ability to support and document areas of Information Security, Privacy, Risk, and compliance processes and programs.
• Ability to support incident response process.
• Experience directing 3rd Party providers in the areas of Information Security, Privacy, Risk and Compliance
• Support information security controls including physical and data security protecting the confidentiality, integrity and availability of information systems data.
• Preferred KSA’s:
• Strong working knowledge and experience with primary Information Security, Privacy, Risk, and compliance standards and frameworks such as NIST, SOC 2, HIPAA, PCI DSS, GDPR, etc.
• Experience administering information security software and controls.
• Experience supporting process for managing network and application security.
• Network and system administration experience a plus.
• Good understanding of Standard Information Security Baseline Frameworks, Business Continuity, and Disaster Recovery protocols and best practices.
• Exposure to ITIL (Incident/Change Management) – ITIL v3F preferred.
• Learns and monitors the business processes for the areas of primary support responsibility.
• Support annual Security Baseline Audits and execution of recommendations.
• As part of the technology team, performs “Help Desk” day-to-day tasks in support of Information Security, Privacy, Risk, and Compliance.

Education and Experience:

• Bachelor’s degree in computer science or related field strongly preferred.
• IAT Level-2 technical certification strongly preferred (Comp TIA Security+ or CISSP) or ability to obtain within first 90 days of hire.
• 5+ years’ experience performing role of Information Security Analyst or SOC
• Demonstrated experience in responding to, managing, and resolving security incidents.
• Experience with LAN/WAN networking concepts, IP addressing and routing concepts, Windows/Linux/Unix operating systems, Information Security concepts, and best practices.
• Experience with Windows/Linux/Unix operating systems, Information Security concepts, and best practices.
• Experience working with Security Information and Even Management (SIEM) system is a plus.

• Monitor security alerts and events using SIEM and other security tools to detect potential threats.
• Investigate security incidents, determine their scope, and implement containment and eradication strategies.
• Develop and maintain security policies, procedures, and guidelines.
• Conduct vulnerability assessments and penetration testing to identify and remediate security weaknesses.
• Implement and manage security technologies such as firewalls, intrusion detection/prevention systems, and endpoint protection.
• Perform regular security audits and ensure compliance with relevant regulations and standards (e.g., ISO 27001, GDPR).
• Educate employees on security best practices and provide awareness training.
• Stay current with the latest cybersecurity threats, trends, and technologies.
• Assist in the development and maintenance of incident response plans and disaster recovery strategies.
• Collaborate with IT and other departments to integrate security into all aspects of operations.
• Manage user access controls and permissions to sensitive systems and data.
• Analyze security metrics and provide reports to management on the overall security posture.
• Participate in security architecture reviews and provide recommendations for improvement.
• Respond to security-related queries and requests from various stakeholders.
• Contribute to the continuous improvement of the organization's security program.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 3-5 years of experience in information security, cybersecurity operations, or a related role.
• Strong understanding of security principles, protocols, and best practices.
• Experience with security tools such as SIEM, IDS/IPS, firewalls, vulnerability scanners, and endpoint security solutions.
• Knowledge of common cyber threats and attack vectors.
• Excellent analytical and problem-solving skills.
• Strong written and verbal communication skills.
• Ability to work independently and manage time effectively in a remote environment.
• Relevant security certifications such as CompTIA Security+, CISSP, or CEH are highly desirable.
• Experience with cloud security concepts is a plus.
• Ability to maintain confidentiality and handle sensitive information.
• A professional home office setup with reliable high-speed internet.