Lead Security Analyst

Coderound Ai is seeking a Lead Security Analyst to join our team in Bengaluru. This role is crucial for strengthening our detection, response, and compliance posture, complementing our existing application security and penetration testing functions. The primary focus will be on the day-to-day monitoring of cloud and endpoint signals, incident triage and response, vendor and access reviews, and operational support for security and privacy compliance. You will collaborate closely with our IT, DevOps, and Legal teams.

Key responsibilities include:

• Monitoring AWS GuardDuty, CloudTrail, WAF, and endpoint/EDR alerts, with prompt triage and escalation according to defined runbooks.
• Tuning detection rules to minimize alert noise and maintaining a comprehensive, documented inventory of detections, their owners, and severities.
• Operating and enhancing SIEM/log pipelines to ensure critical workloads, S3 buckets, and identity events are adequately monitored.
• Tracking threat intelligence pertinent to the healthcare sector and the Indian regulatory landscape, providing expert advice on emerging risks.
• Acting as the first responder for security incidents, leading initial containment efforts, evidence preservation, and stakeholder communications.
• Maintaining and actively exercising the incident response playbook for scenarios such as ransomware, data exfiltration, account compromise, and insider misuse.
• Coordinating with external IR retainers, cyber insurance providers, and forensic partners during significant incidents.
• Conducting periodic configuration reviews using CSPM/CNAPP tooling, prioritizing and driving the closure of high-risk findings.
• Performing quarterly audits to ensure adherence to established security policies.
• Monitoring for secrets exposure, public S3 surfaces, IAM drift, and privileged access usage.
• Supporting the hardening of MDM, endpoint protection, and email security controls.
• Introducing and guiding teams on best practices for security management.

The ideal candidate will have 2-7 years of experience in a similar security analysis or engineering role.