SOC Analyst | IT Security | Pune

Cyber Toddler is inviting applications for its 6-week Cybersecurity Operations, SOC & Threat Intelligence Internship — a weekend-only practical program designed for students, fresh graduates and early-career cybersecurity professionals.

The internship focuses on the skills used across modern security operations, including SOC monitoring, SIEM and log analysis, threat intelligence, incident response, threat hunting and security detection.

Rather than focusing only on theoretical learning, selected interns will work through simulated security incidents, investigate logs and indicators, analyze threats, document findings and complete a final cybersecurity investigation project.

What you will work on:

• SOC operations and security monitoring
• SIEM concepts and log analysis
• Security alert triage
• Threat intelligence and IOC investigation
• Phishing and suspicious activity analysis
• Incident response
• MITRE ATT&CK
• Threat hunting
• Detection engineering fundamentals
• Security investigation and reporting
• Cybersecurity documentation
• End-to-end SOC investigation

Duration: 6 weeks

Mode: Remote

Schedule: Weekends

Commitment: Approximately 4–5 hours per week

Cohort: Limited seats

This role will be permanent with NAM info and deploy to client location Chennai.

Work Mode: WORK FROM OFFICE

Offer salary can offer on a decent hike

Role Descriptions:

Exp Range: 6-10 years

Primary Competency : Terraform, Hashi Sentinel (IaC/PaC), Kubernetes (GKE/EKS)

City Locations: Bengaluru or Chennai

Key Responsibilities*

Experience Required: 6-10

Role Descriptions:

Security Monitoring & Incident Response

Investigate and analyze security alerts escalated by L1 SOC analysts.

Perform triage, containment, eradication, and recovery activities for security incidents.

1. Perform in-depth analysis of security alerts escalated from L1

2. Investigate suspicious activities using SIEM, EDR, and threat intelligence tools

3. Correlate events across multiple log sources (firewalls, endpoints, IAM, cloud logs)

4. Validate true positives and recommend reducing false positives

5. Lead triage and response for medium to high severity incidents

6. Coordinate with IT, network, and application teams during incidents and support deep investigations when required

7. Conduct proactive threat hunting based on TTPs (e.g., MITRE ATT&CK)

8. Fine-tuning and optimize SIEM use cases to reduce false positives

9. Develop new correlation rules and detection logic

10. Document incidents, findings, and response actions

11. Prepare weekly , monthly reports for SOC leadership and stakeholders

Desire candidate

• Candidate should have valid PF.

A Senior Cybersecurity Engineer is responsible for safeguarding an organization’s IT infrastructure, applications, and data against cyber threats. With 5–10 years of experience, the role demands expertise in designing, implementing, and managing advanced security solutions, conducting risk assessments, and responding to incidents. Senior Engineers also mentor junior staff and contribute to strategic security planning.

Key Responsibilities

• Design, implement, and manage enterprise-level security solutions (firewalls, IDS/IPS, SIEM, endpoint protection).
• Conduct vulnerability assessments, penetration testing, and risk analysis.
• Monitor and respond to security incidents, ensuring timely resolution and documentation.
• Develop and enforce security policies, standards, and compliance frameworks (ISO 27001, NIST, GDPR).
• Collaborate with IT and business teams to integrate security into system architecture and processes.
• Lead incident response drills and disaster recovery planning.
• Provide guidance and mentorship to junior cybersecurity staff.
• Stay updated on emerging threats, tools, and technologies.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
• 5–10 years of proven experience in cybersecurity engineering or related roles.
• Strong knowledge of network security, cloud security (AWS, Azure, GCP), and endpoint protection.
• Hands-on experience with SIEM tools (Splunk, QRadar, ArcSight), firewalls, and intrusion detection/prevention systems.
• Certifications such as CISSP, CISM, CEH, or OSCP are highly desirable.

Skills

• Advanced problem-solving and analytical skills.
• Strong communication and leadership abilities.
• Ability to manage complex projects and handle escalations effectively.
• Proactive mindset with adaptability to evolving cyber threats.

Job Description – Tines SOAR Engineer

Job Title: Tines SOAR Engineer

Experience: 6+ Years

Employment Type: Contract

Job Location: India – Hybrid/Remote

Company: Prama.ai

About the Role

Prama.ai is looking for an experienced Tines SOAR Engineer to design, develop, and maintain security automation workflows for enterprise SOC environments. The ideal candidate should have strong hands-on experience with Tines SOAR, security operations, incident response, API integrations, and automation.

Key Responsibilities

• Design, develop, and maintain automation workflows (Tines Stories).
• Build and enhance security playbooks for incident response and alert handling.
• Develop integrations between Tines and SIEM, EDR/XDR, IAM, ITSM, and other security tools.
• Implement integrations using REST APIs, Webhooks, JSON, and OAuth.
• Automate repetitive SOC and security operations to improve incident response efficiency.
• Troubleshoot, monitor, and optimize Tines automation workflows.
• Collaborate with SOC, Security, Infrastructure, and IT teams.
• Support security automation use cases across enterprise environments.

Required Skills

• 6+ years of IT/Security experience with strong hands-on experience in Tines SOAR.
• Hands-on experience developing Tines Stories, Actions, Event Transformations, and API integrations.
• Strong understanding of SOC, Incident Response, Security Operations, and Security Automation.
• Strong knowledge of REST APIs, JSON, Webhooks, and OAuth.
• Experience with at least one SIEM:
• Microsoft Sentinel
• Splunk
• IBM QRadar
• Google Chronicle
• Experience with at least one EDR/XDR:
• Microsoft Defender
• CrowdStrike
• SentinelOne
• Cortex XDR
• Scripting experience in Python, JavaScript, or PowerShell.
• Experience with ServiceNow or Jira.
• Working knowledge of Windows/Linux environments.
• Good understanding of TCP/IP, DNS, HTTP/HTTPS.
• Knowledge of Active Directory, Entra ID, or Okta.

Preferred Skills

• Experience working with Banking/BFSI clients.
• Knowledge of Microsoft Security Stack.
• Understanding of Threat Intelligence and MITRE ATT&CK.
• Exposure to AWS or Azure Security.
• Experience with enterprise SOC automation and security integrations.

Preferred Certifications

• Tines Certification
• Microsoft SC-200
• CompTIA Security+ / CySA+
• Microsoft AZ-500

The role primarily focuses on the administration and operational support of security platforms, with a heavy emphasis on Netskope. 

You will:​

• Administer and optimize security platforms including Netskope (CASB/SSE), CyberArk EPM,  Mimecast, and others​
• Monitor, analyze, and respond to security events generated by these platforms, ensuring timely triage and resolution​
• Develop, tune, and maintain security policies (DLP, web controls, email security, endpoint privilege management) to reduce risk and false positives​
• Lead troubleshooting and root cause analysis for security incidents and platform issues across endpoint, cloud, and email security domains​
• Collaborate with engineering, IT, and business teams to implement security controls and drive remediation of identified risks​
• Integrate security tools with ServiceNow for incident management, request workflows, and automated response actions​
• Build and maintain operational dashboards and reporting for security posture, tool effectiveness, and KPIs​
• Support onboarding of new applications, users, and use cases into Netskope, Mimecast, and CyberArk EPM​
• Contribute to security architecture decisions and continuous improvement of tooling and processes​
• Develop and maintain runbooks, standard operating procedures, and knowledge base documentation 

You bring:

​

• Bachelor’s degree or 5+ years of equivalent experience in Cybersecurity or related field​
• 7+ years of experience in security engineering or security operations roles​
• Strong hands-on experience with Netskope (CASB/SSE), CyberArk EPM, and Mimecast administration and operations​
• Experience integrating and operating workflows within ServiceNow (incident, change, and request management)​
• Solid understanding of endpoint security, DLP, email security, and cloud security concepts​
• Experience tuning security tools to reduce false positives and improve detection fidelity​
• Familiarity with identity and access management concepts, including privilege management and least  privilege principles​
• Ability to analyze security events and translate findings into actionable remediation steps​
• Strong cross-functional collaboration and communication skills​
• Experience developing documentation, runbooks, and operational processes​
• Ability to manage multiple priorities and operate effectively in a fast-paced environment 

MUST HAVE: Netskope Subject Matter Expertise (SME) 

• Netskope expertise is non-negotiable. 
• Candidates must be capable of serving as effective platform administrators. 
• Candidates should have a deep understanding of security policies within Netskope. 

Responsibilities 

The successful candidate will: 

• Support Netskope as the primary platform. 
• Administer and maintain security controls. 
• Fine-tune DLP policies. 
• Investigate access-related platform issues. 
• Support ticket resolution related to Netskope. 
• Work with feedback coming from the SOC team. 
• Manage policy adjustments to reduce false positives. 

About Nerve Solutions

Nerve Solutions is a team of engineers building products for real-time risk management and surveillance in financial markets. Our solutions enable market participants to identify, monitor, and quantify risks and anomalies in live markets, allowing them to take corrective action at sub-second speeds.

We also develop products for automated trading and have become a trusted technology partner to some of the largest financial services organizations in the region.

About the Role

We are looking for a proactive and detail-oriented IT & Information Security Engineer to manage and maintain the organization's IT infrastructure while ensuring the security, availability, and reliability of our systems. The role involves providing technical support, administering hardware and software, strengthening cybersecurity practices, monitoring network activities, and implementing security controls to safeguard organizational assets.

The ideal candidate should have strong infrastructure knowledge, a security-first mindset, and the ability to troubleshoot technical issues while continuously improving the organization's IT environment.

Roles & Responsibilities

• Manage and maintain the organization's IT infrastructure, including hardware, software, servers, and network systems.
• Provide technical support to employees by troubleshooting hardware, software, network, and system-related issues.
• Configure, deploy, and maintain desktops, laptops, peripherals, printers, and other IT equipment.
• Set up user accounts, systems, and required software for new employees and support onboarding activities.
• Monitor network performance and employee network activities to ensure system security and compliance.
• Implement and maintain endpoint security solutions, antivirus tools, firewalls, and access control mechanisms.
• Perform regular system updates, security patching, vulnerability assessments, and preventive maintenance.
• Identify infrastructure risks and recommend security enhancements to minimize vulnerabilities.
• Maintain documentation for IT assets, software licenses, network configurations, security policies, and system inventories.
• Assist in implementing information security best practices, security audits, and compliance initiatives.
• Coordinate with internal teams to ensure IT services effectively support business operations.
• Stay updated with the latest cybersecurity threats, technologies, and industry best practices.

Required Skills

• 2–4 years of experience in IT Infrastructure, System Administration, or Information Security.
• Strong knowledge of Windows operating systems, networking, servers, and IT infrastructure.
• Experience troubleshooting hardware, software, network, and user-related issues.
• Knowledge of network security, endpoint protection, firewalls, VPNs, and vulnerability management.
• Experience with Active Directory, user access management, and system administration.
• Familiarity with Microsoft 365 administration is an added advantage.
• Understanding of backup, disaster recovery, and IT asset management.
• Strong analytical and problem-solving skills with attention to detail.
• Good communication and documentation skills.
• Ability to work independently and collaboratively in a fast-paced environment.

Preferred Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Certifications such as CompTIA A+, Network+, Security+, Microsoft, CCNA, or equivalent will be an added advantage.

Job Summary

We are looking for a Senior Compliance Analyst to manage and support cybersecurity compliance, GRC, risk assessments, audits, and client engagements. The candidate will evaluate security controls, identify compliance gaps, review evidence, and provide practical recommendations.

Key Responsibilities

• Conduct Compliance Audits, Gap Assessments, and Risk Assessments.
• Assess controls against ISO 27001, SOC 2, PCI DSS, ISO 27701, ISO 42001, HIPAA, GDPR, DPDP, etc.
• Review policies, procedures, controls, and audit evidence.
• Identify gaps, risks, observations, and recommend remediation.
• Prepare Risk Registers, SoA, Control Matrices, Audit Reports, and Compliance Reports.
• Support clients during certification, surveillance, and external audits.
• Conduct client meetings, interviews, and control walkthroughs.
• Coordinate evidence collection and remediation tracking.
• Develop and review information security policies and procedures.
• Stay updated with cybersecurity standards, regulations, and best practices.

Required Skills

• Strong understanding of Information Security, GRC, Risk & Compliance.
• Good knowledge of ISO 27001:2022 and SOC 2.
• Understanding of cybersecurity controls, IT infrastructure, cloud security, IAM, vulnerability management, and security operations.
• Strong analytical, documentation, communication, and report-writing skills.
• Ability to independently manage client engagements.

Qualifications

• Bachelor's degree in Cybersecurity, IT, Computer Science, or related field.
• 2–6 years of relevant experience in GRC, IT Audit, Cybersecurity Compliance, or Consulting.
• Certifications such as ISO 27001 LA/LI, CISA, CISSP, CRISC, or relevant GRC certifications are preferred.