Information Security Analyst

Job Overview:

We are seeking a skilled and proactive Information Security Analyst with 4-7 years of experience to join our team. The role requires expertise in identifying and mitigating security risks, implementing security measures, and ensuring compliance with industry standards and regulations. This position offers the opportunity to work on cutting-edge security solutions and play a pivotal role in protecting organizational assets.

Key Responsibilities:

1. Risk Management & Assessment:
2. Conduct risk assessments and vulnerability analyses across IT infrastructure and applications.
3. Identify potential security risks and recommend appropriate mitigation strategies.
4. Threat modelling & data flow analysis. 
5. Compliance & Governance:
6. Ensure compliance with standards like ISO 27001, RBI, DPDP, and other applicable regulations.
7. Develop, implement, and maintain security policies, procedures, and guidelines.
8. Incident Response & Monitoring:
9. Investigate and respond to security incidents, ensuring quick resolution.
10. Monitor security alerts and perform root cause analyses for detected vulnerabilities.
11. Security Tools & Technologies:
12. Manage and optimize tools like Primsa (CSPM), WAF tool, endpoint protection, and DLP solutions.
13. Hands on with security tools such as Burpsuite, Zap proxy & equivalent.
14. Collaboration & Stakeholder Engagement:
15. Work closely with IT, DevOps, and application teams to integrate security into the software development lifecycle (SDLC).
16. Collaborate with external auditors and consultants during assessments and audits.

Required Skills & Qualifications:

• Bachelor's degree in computer science, Information Security, or a related field.
• 4-7 years of hands-on experience in information security or related roles.
• In-depth knowledge of security frameworks, standards, and tools.
• Proficiency in security incident management, threat hunting, and forensics.
• Strong understanding of networking protocols and firewall configurations, with specific knowledge of GCP's Virtual Private Cloud (VPC) networking, firewalls, and load balancing services. 
• Experience with mobile application penetration testing methodologies.
• Certifications such as OSCP ,CompTIA Security+, CISM, CEH, or equivalent are highly desirable.

Preferred Skills:

• Experience in DevSecOps practices and integrating security into CI/CD pipelines.
• Familiarity with API security and cloud-native security solutions.
• Knowledge of scripting and automation (Python, PowerShell, or similar).
• Strong problem-solving, analytical, and communication skills.