Cybersecurity

Black Box•United States,

2d•Onsite

About The Position

The Security Analyst will research, evaluate, design, configure, implement, maintain, and monitor the CrowdStrike Falcon Complete platform and other security systems and solutions, and triage incidents related to those platforms. The role also handles security administration, including CrowdStrike and O365 security, security configuration and policy management, continuous monitoring and improvement, and cross-platform intelligence generation and reporting. The analyst designs, builds, and monitors core cybersecurity systems and capabilities, with a focus on enhancements and tuning. Working with the broader Cyber Security team, the role helps enforce and maintain security technologies and controls across the global enterprise and workforce. It identifies, responds to, and mitigates cyber threats and risks across company systems and assets, using technologies such as firewalls, endpoint security, malware analysis, application and cloud security, SIEM, XDR, and SOAR platforms. The position is based in the Bangalore office, India.

Requirements

At least 5 years and up to 8 years of experience.
Bachelor’s degree in computer science, information science, or a related field.
Strong hands-on experience with security tools, including CrowdStrike EDR, ITP, SOAR Fusion, and API integrations.
Experience with SIEM platforms, Cisco IronPort, Cisco Umbrella, Cisco Secure Endpoint, CrowdStrike, and Forcepoint DLP.
Experience working and communicating with cross-functional IT infrastructure teams, including network, systems, database, application, and security teams.
Exposure to frameworks and compliance standards such as MITRE ATT&CK, CIS Critical Controls, OWASP, SOC 2, and ISO 27001.
Exposure to cybersecurity areas including host security, network security, IAM, vulnerability management, DLP, penetration testing, and compliance.
Understanding of SOC processes, including monitoring, analysis, playbooks, escalation, incident documentation, SLAs, client meetings, BCP, and report creation.
Understanding of IT systems, networks, and security technologies.
Analytical ability to interpret data, identify trends, and make recommendations.
Strong problem-solving skills, including resolving compliance and risk issues.
Fluent English communication with local and international users; ability to communicate effectively with peers and management.
Ability to collaborate across security and broader organizational teams, think critically, reason logically, question existing controls, and improve security posture.
Proactive and self-driven.

Nice To Haves

At least one relevant certification is preferred; examples include CISSP, CISM, CISA, CRISC, Security+, GIAC, GSEC, GCIA, GCFA, or GCTI, or an equivalent certification.
CISA, CISM, CISSP, or other relevant certifications can be beneficial.

Responsibilities

Research, evaluate, design, configure, implement, maintain, and monitor CrowdStrike Falcon Complete and other security systems and solutions.
Triage security incidents related to security platforms and conduct in-depth analysis of alerts.
Design, build, monitor, enhance, and fine-tune core cybersecurity systems and capabilities.
Enforce and maintain security technologies, controls, and policies across the global enterprise and workforce.
Identify, respond to, and mitigate cyber threats and risks targeting company systems and assets.
Administer CrowdStrike, O365 Security, security configurations, and security policies; perform continuous monitoring and improvement and generate cross-platform intelligence and reports.
Fine-tune CrowdStrike security policies and capabilities to improve detection and security posture.
Collaborate and communicate with network, systems, database, application, and security infrastructure teams to build and manage effective security operations.
Work with internal and external audit teams and represent organizational responses.
Perform root-cause analysis of incidents and breaches and maintain compliance with global data privacy laws, including GDPR.
Maintain up-to-date documentation of security designs and configurations.
Identify, assess, and prioritize IT risks and develop mitigation strategies.
Ensure compliance with applicable regulations, standards, and internal policies, including GDPR, CCPA, ISO 27001, and SOC 2.
Create and maintain IT governance policies and procedures.
Conduct internal audits, track and document findings, and prepare reports for management and stakeholders.
Collaborate with IT, security, and business teams to implement and maintain governance, risk, and compliance programs.
Monitor regulatory and industry developments, evaluate controls, map controls to standards, and drive improvements.
Explain technical concepts and security findings to technical and non-technical audiences.