Senior IT Cyber Defense Analyst

Job not on LinkedIn

🔥 11 minutes ago

🇮🇳 India – Remote

⏰ Full Time

🟠 Senior

🧐 Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Harris Computer

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1976

Harris provides mission-critical software solutions for the Public Sector, Healthcare, Utilities, and Private Sector verticals throughout North America, Europe, Asia, and Australia.

📋 Description

• Lead SOC shift operations, prioritize alerts, manage escalations, and ensure timely handovers and SLA adherence • Investigate complex incidents involving phishing, malware, ransomware, compromised accounts, endpoint threats, and suspicious network activity • Conduct threat hunting, correlate security telemetry, and map attacker behavior to the MITRE ATT&CK framework • Develop, optimize, and troubleshoot SIEM queries, analytics rules, and detection use cases using Microsoft Sentinel and KQL • Use approved AI/LLM tools for alert triage, investigation assistance, threat intelligence enrichment, KQL development, incident reporting, and workflow automation; independently validate AI-generated outputs • Automate repetitive SOC tasks using Python, PowerShell, APIs, or SOAR capabilities • Mentor analysts, improve investigation quality, reduce false positives, and maintain accurate incident documentation and audit-ready evidence • Coordinate with Incident Response, IT, Endpoint, Network, and Cloud teams to support containment, remediation, and recovery • Deliver effective shift leadership and timely, high-quality incident handling • Improve detection coverage, investigation efficiency, and reduce false positives • Drive practical adoption of AI and automation while maintaining security, accuracy, and human oversight • Support analyst development, documentation, and operational consistency

🎯 Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience • 5+ years of experience in SOC, cyber defense, or incident response, including shift leadership, incident coordination, or analyst mentoring • Strong hands-on experience with SIEM, EDR/XDR, incident investigation, and threat detection • Proficiency in Microsoft Sentinel and KQL; experience with Microsoft Defender, CrowdStrike, or similar security platforms • Strong understanding of networking, Windows/Linux, identity security, email threats, and MITRE ATT&CK • Mandatory practical AI/LLM proficiency, including prompt engineering, AI-assisted investigations, validation of AI-generated queries/scripts, and awareness of hallucinations, prompt injection, and data privacy risks • Scripting or automation experience using Python, PowerShell, APIs, or SOAR tools • Strong analytical, communication, decision-making, and team leadership skills • Willingness to work in a 24/7 rotational shift environment • Certifications such as Microsoft SC-200, CompTIA CySA+, GCIH, or relevant SIEM/EDR vendor certifications • Experience in proactive threat hunting, detection engineering, cloud security, and SOC process improvement