Information Security Analyst

Role Description

Information Security Analyst

UST seeks a skilled Information Security Analyst to join their Security Operations Center (SOC) team in Pune, Maharashtra. This role focuses on first-line security monitoring, incident response, and compliance support to safeguard UST’s global digital infrastructure.

Key Responsibilities:

• Perform continuous monitoring of security alerts from SIEM, EDR, email security, DLP, and other tools using defined shift rosters.
• Triage, validate, and classify security incidents by severity, filtering false positives based on predefined criteria.
• Follow standardized operating procedures (SOPs) and playbooks for common threats like phishing, malware, and brute-force attacks.
• Escalate validated incidents to the L2 team with evidence, findings, and timelines, adhering to the escalation matrix.
• Monitor and resolve basic security tickets (user access requests, antivirus compliance, endpoint flags) within SLAs.
• Track and document security incidents, ensuring accurate logging, categorization, and reporting in the ticketing/ITSM system.
• Support vulnerability scanning activities, including scheduling, report sharing, and remediation tracking.
• Collaborate with security tool owners (SIEM, EDR/XDR, DLP, email gateway, IAM/PAM) for tuning, feedback, and log source optimizations.
• Identify recurring patterns, noisy rules, and log gaps to recommend tuning for L2/tool owners.
• Provide first-level incident support, including evidence collection, containment steps, and notifications as directed.
• Assist in evidence collection for security audits (ISO 27001, SOC 2) and compliance assessments.
• Participate in tabletop exercises, disaster recovery drills, and incident simulations.
• Maintain shift handover logs and update SOPs, playbooks, and runbooks based on operational feedback.
• Generate daily/weekly SOC operational reports on volumes, SLA adherence, and open items.

  Required Skills & Qualifications:

  • Bachelor’s degree in Computer Science, IT, or a related field.
  • Strong understanding of networking, operating systems, and common attack vectors.
  • Familiarity with SIEM/EDR tools and security frameworks (MITRE ATT&CK, NIST, ISO 27001).
  • Basic scripting knowledge (Python/PowerShell) for automation is a plus.
  • Preferred certifications: CompTIA Security+, CEH, CySA.
  • Excellent analytical, documentation, and communication skills.

  Skills: Email Security, Incident Response, Identity & Access Management, Python.