Associate Cybersecurity Analyst

Bruker is seeking an Associate Cybersecurity Analyst to join our team in Bengaluru/Bangalore, India. This is a crucial role as the first line of defense against cyber threats. You will be responsible for monitoring, analyzing, and responding to security incidents to ensure the confidentiality, integrity, and availability of our critical systems. This position demands strong technical expertise, sharp analytical skills, and a proactive approach to threat detection and mitigation.

Key Responsibilities

• Monitor and analyze security alerts from SIEM and XDR platforms, with a preference for Microsoft Defender and Microsoft Sentinel.
• Investigate and respond to security incidents, including containment, eradication, and recovery efforts.
• Perform comprehensive log analysis and develop or customize detection rules using KQL (Kusto Query Language).
• Conduct phishing investigations and implement industry-standard email security best practices.
• Collaborate effectively with IT and security teams to deploy preventive measures and enhance the organization's overall security posture.
• Utilize frameworks such as MITRE ATT&CK and Cyber Kill Chain for threat modeling, analysis, and proactive threat hunting.
• Conduct regular health checks on Azure Virtual Machines and other Azure cloud resources.
• Prepare detailed incident reports, create informative dashboards, and provide trend analytics for key stakeholders.
• Support and assist the Senior Vulnerability Analyst in managing the full vulnerability management lifecycle across servers, endpoints, applications, and cloud workloads.
• Assist with vulnerability scanning using tools like Tenable, analyze scan results, validate true positives, and identify high-risk exposures.
• Coordinate with IT, infrastructure, and application teams to track remediation activities, ensuring vulnerabilities are addressed within defined Service Level Agreements (SLAs).
• Prioritize vulnerabilities based on severity, business impact, exploitability, and threat intelligence insights.
• Maintain vulnerability metrics, generate weekly/monthly reports, and escalate critical risks as necessary.
• Contribute to the enhancement of detection coverage, configuration hygiene, and the reduction of recurring or systemic vulnerabilities.

Qualifications

• Education: Bachelor's degree in Computer Science, Information Technology, or a related field.
• Experience: 2-3 years of experience in SOC operations or cybersecurity roles.
• Demonstrated hands-on experience (minimum 1 year) with Linux/Unix OS administration and security.
• Strong working knowledge of Microsoft XDR and Microsoft Sentinel for threat detection and response.
• Proficiency in KQL for log analysis and the creation of custom detection rules.
• Solid understanding of incident handling processes, including containment, eradication, and recovery.
• Familiarity with phishing investigation techniques and email security best practices.
• Knowledge of the MITRE ATT&CK framework, Cyber Kill Chain, and threat hunting methodologies.
• Experience in managing and securing Azure Virtual Machines.
• Exceptional analytical and problem-solving skills with a keen attention to detail.
• Excellent communication and reporting skills for effective cross-team collaboration.

Location: India, Bengaluru/Mumbai