Security Analyst – SOC & SIEM Engineer

About the role

We are a leading FinTech and Consumer Finance enterprise seeking a Security Analyst to join our SOC and cyber operations team. You will be responsible for designing, building, and continuously monitoring our SIEM platform while ensuring robust protection across cloud and on‑premise environments.

Key responsibilities

• Lead the architecture, deployment, and ongoing monitoring of corporate SIEM/SOC operations.
• Author, tune, and optimise correlation rules, detection logic and incident‑response playbooks for real‑time threat mitigation.
• Perform hands‑on security controls, vulnerability assessments and manage the full incident‑response lifecycle.
• Design and document technical security architecture (HLD/LLD) for cyber‑defence capabilities.
• Operate and maintain complex security solutions such as DLP, WAF, IAM/IDM and vulnerability‑management tools.
• Ensure compliance with financial security regulations, governance standards and data‑protection policies across multi‑platform networks.

Required profile

• Minimum 2 years of hands‑on experience with SIEM monitoring platforms and rule authoring.
• At least 2 years operating enterprise‑scale cyber‑defence and security‑operations platforms.
• 2 years of experience securing cloud infrastructures (AWS, Azure or GCP).
• Proven background in a mid‑to‑large enterprise environment.
• Strong knowledge of Windows and Linux operating systems, networking protocols, Active Directory, Group Policy and modern authentication mechanisms.

Required skills

• SIEM platforms (e.g., Splunk, QRadar, ArcSight)
• Cloud security (AWS, Azure, GCP)
• Operating systems: Windows, Linux
• Networking protocols
• Active Directory & Group Policy
• Identity & Access Management (IAM/IDM)
• Data Loss Prevention (DLP)
• Web Application Firewall (WAF)
• Vulnerability Management tools