AI Cybersecurity Analyst

We are seeking an AI Cybersecurity Analyst based in India to join our partner company’s team. This role bridges cybersecurity operations and AI-driven automation, requiring critical human judgment to validate machine-generated threat insights. You will work in a modern SOC environment using advanced XDR and SIEM technologies, ensuring automated investigations are accurate, contextually relevant, and aligned with enterprise security standards.

Key Responsibilities:

• Validate AI-driven SOC investigations by reviewing incident narratives, alerts, and correlated security signals for accuracy and completeness.
• Identify and report technical issues in automated workflows, ensuring seamless execution of security processes.
• Confirm incident verdicts by analyzing false positives, misclassifications, or incomplete threat assessments.
• Perform deep technical analysis, including file inspection, sandboxing, URL detonation, and contextual investigations using enterprise data.
• Review and validate incident management tags, approving or modifying AI-generated findings before escalation.
• Collaborate with security teams to refine detection logic and improve AI-assisted SOC reliability.
• Maintain high standards of accuracy, documentation, and operational consistency across security investigations.
• Support continuous improvement of Microsoft Defender XDR and Sentinel detection and response workflows.

Ideal Candidate Profile:

• Foundational cybersecurity knowledge including SOC operations, incident response, and threat analysis.
• Proficient with SIEM and XDR platforms, particularly Microsoft Defender XDR and Sentinel.
• Understanding of the MITRE ATT&CK framework and common attack techniques.
• Strong analytical mindset with critical evaluation of AI-generated security findings.
• Exceptional attention to detail for identifying inconsistencies in complex security data.
• Excellent written and verbal communication skills for documenting incident analysis.
• Ability to thrive in fast-paced SOC environments with concurrent investigations.
• Relevant certifications (e.g., Microsoft SC-200) are a plus.
• Basic understanding of security automation, SOAR, or AI-assisted SOC workflows.
• Curiosity and commitment to learning emerging cybersecurity and AI technologies.