Threat Analyst

Threat Analyst – Cybersecurity Operations Role (India)

Join Jobgether’s partner company as a Threat Analyst in a dynamic cybersecurity operations team focused on identifying, investigating, and mitigating advanced threats across endpoint, network, cloud, and identity environments. This role offers hands-on experience in real-world cybersecurity challenges, including ransomware investigations, malware analysis, and proactive threat hunting.

As a Threat Analyst, you will:

• Investigate complex security alerts and incidents in a 24/7 monitoring environment, analyzing attack scope, root causes, and potential business impact.
• Support ransomware investigations by examining attacker behaviors, credential abuse, malware activity, and intrusion techniques.
• Analyze suspicious scripts, malware samples, and indicators of compromise using reverse engineering and deobfuscation techniques.
• Conduct proactive threat hunting based on threat intelligence, investigative hypotheses, and emerging attack patterns.
• Collaborate with senior analysts to improve detection capabilities, security playbooks, and operational processes.
• Document findings clearly and provide actionable remediation recommendations.
• Work in a remote-first environment with flexibility, autonomy, and exposure to enterprise-grade security technologies.

Requirements:

• 4–6 years of experience in a SOC, MDR, incident response, or cybersecurity operations role.
• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or equivalent professional experience.
• Strong expertise in investigating endpoint and network security alerts using EDR and SIEM platforms.
• Deep understanding of ransomware attack techniques, intrusion methods, and adversary behaviors.
• Hands-on experience analyzing Windows/Linux systems, logs, processes, and security events.
• Familiarity with the MITRE ATT&CK framework, Windows Event Logs, Active Directory, and identity security.
• Scripting skills in PowerShell, Python, or other languages.
• Excellent documentation, communication, and investigative reporting skills.
• Security certifications (e.g., Security+, CySA+, GCIH) are a plus.

This is a remote-first position with opportunities for continuous learning, team collaboration, and global impact.