Security Operations Analyst
India · Remote
- Posted 1w ago
- From Workstreet’s careers page
- Location
- India
- Work mode
- Remote
- Experience
- 3+ years
- Department
- Information Technology
Opens the listing on ats.rippling.com
Let the right jobs find you
In your inbox every Wednesday and SaturdayPersonalised suggestions from verified career pages, matched to your role, location, level and skills.
About the role
About Workstreet:
At Workstreet, we're on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. We specialize in GRC (governance, risk, and compliance) services supporting SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP.
Get to know the Security Services Team:
Our MDR function spans real-time monitoring and alert triage, threat detection and investigation, and incident analysis and response guidance, using EDR, SIEM, IPS, WAF, and firewall platforms across our client base.
The Opportunity:
Workstreet is seeking a Security Operations Analyst to join our Security Services team. This is a hands-on monitoring and investigation role. You will work a 24x7 rotating shift schedule and ramp into our detection stack and client environments, taking ownership of shift-level monitoring, investigation quality, and escalation judgment within your first 30 days.
What you'll do:
- Execute real-time monitoring and triage across EDR, firewall, IPS, WAF, and SIEM platforms.
- Maintain 24x7 shift coverage, including assigned nights, weekends, and holidays.
- Conduct deep incident investigations by correlating telemetry across EDR, network, and cloud log sources.
- Deliver remediation guidance to client teams who own response execution.
- Tune detection logic and SIEM correlation rules to reduce false positives and close coverage gaps.
- Maintain SOC playbooks and documentation, including investigation findings and incident timelines.
- Partner with GRC engineers and vCISOs to ensure threat detection supports client compliance obligations.
- Support shift handoffs and guide junior analysts on investigative techniques.
Who you are:
- Experienced SOC analyst with 3+ years of hands-on experience monitoring, triaging, and investigating security alerts in a high-velocity SOC.
- Multi-platform telemetry investigator skilled at correlating data across EDR, firewall, IPS, WAF, and SIEM tools.
- Autonomous incident owner who can own complex investigations end to end.
- Clear technical communicator who can explain incidents in plain language to client stakeholders.
- Willing and able to work a 24x7 rotating shift schedule.
- Collaborative shift operator who maintains operational continuity across shift transitions.
What help you succeed:
- Recognized industry security credentials such as CompTIA Security+, CySA+, GCIH, or equivalent.
- Practical experience with EDR tools (CrowdStrike, SentinelOne, Defender) and SIEM solutions (Splunk, Microsoft Sentinel, Sumo Logic, Wazuh).
- Experience configuring, maintaining, and tuning security platforms.
- Proficiency in Python or PowerShell scripting and SOAR playbook development.
- Prior experience in managed security service provider (MSSP) environments.
- Awareness of how SOC 2, ISO 27001, and HIPAA requirements align with threat detection and incident response.
What we offer:
- Career development with mentorship and training opportunities.
- Reimbursement for approved training and certification courses.
- Competitive base salary with performance reviews and bonus opportunities.
- Early-stage company with significant room for career advancement.
- Remote-first culture with flexibility to work from anywhere within your assigned shift.
What you'll need to thrive:
- Excellent written and verbal English communication skills.
- A reliable, high-speed internet connection and a professional home office environment.
- Commitment to your assigned shift within the 24x7 SOC rotation, including nights, weekends, and holidays.
- Willingness to travel locally for occasional onsite meetings as needed.
Hiring and Selection Process:
- Candidates must participate in live video interviews with camera on.
- Employment is contingent upon successful identity verification and background screening, where permitted by law.
- Selected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders.
Equal Opportunity:
Workstreet is an equal opportunity employer and is committed to providing employment opportunities to all individuals without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.
Skills they ask for
Pick one to see other roles that ask for it.
About Workstreet
Cybersecurity and compliance for growing companiesWorkstreet provides cybersecurity and compliance support for growing companies, including security programs, virtual CISO services, penetration testing, and questionnaire automation.
See all 41 roles at WorkstreetMore roles at Workstreet
See all 41- GRC EngineerIndia · RemoteLegal and Compliance · RemoteIndia1d
- GRC EngineerIndia · Entry Level · RemoteLegal and Compliance · Entry Level · RemoteIndia2d
- Penetration TesterIndia · RemoteInformation Technology · RemoteIndia1w
- Vulnerability Management EngineerGurugram · RemoteEngineering · RemoteGurugram, India1w
Let the right jobs find you
In your inbox every Wednesday and SaturdayPersonalised suggestions from verified career pages, matched to your role, location, level and skills.