Information Security Analyst

Role description

Security Engineer

Key Responsibilities

Perform continuous, first-line monitoring of security s generated by security tools (SIEM, EDR, email security, DLP, etc.) as per defined shift roster.

Triage and classify security s based on severity, perform initial validation, and filter out false positives as per defined criteria.

Follow standard operating procedures (SOPs) and playbooks for common types - phishing, malware, brute-force attempts, suspicious logins, etc.

Escalate validated/confirmed incidents to the L2 team with complete initial findings, evidence, and timeline, following the defined escalation matrix.

Monitor and act on basic security tickets - user access requests, antivirus s, endpoint compliance flags - within defined SLAs.

Track s and tickets through to closure; ensure accurate logging, categorization, and documentation in the ticketing/ITSM tool.

Support vulnerability scanning activities - assist in scheduling scans, sharing reports, and tracking remediation status with respective teams.

Coordinate with security tool owners (SIEM, EDR/XDR, DLP, email gateway, IAM/PAM) as and when required - for tuning inputs, false-positive feedback, log source issues, agent health, and access-related requests. (Note: tool configuration and policy changes remain with the respective tool owners.)

Report recurring patterns, noisy rules, and log source gaps to L2/tool owners for tuning and optimization.

Provide first-level support during security incidents - evidence collection, notification, and execution of containment steps as directed by L2/L3 or the Incident Manager.

Assist in evidence collection for security audits and compliance assessments (ISO 27001, SOC 2) as guided by the GRC/compliance team.

Participate in table-top exercises, DR drills, and incident simulations as part of the SOC team.

· Maintain shift handover logs and contribute to keeping SOPs, playbooks, and runbooks up to date based on operational feedback. · Prepare and share daily/weekly SOC operational reports - volumes, SLA adherence, open items.

Required Skills & Qualifications

Bachelor’s degree in computer science, IT, or related field.

Basic understanding of networking, operating systems, and common attack vectors; exposure to SIEM/EDR tools preferred.

Working knowledge of security frameworks and standards (MITRE ATT&CK, NIST, ISO 27001).

Familiarity with scripting (Python/PowerShell) for automation of security tasks is an added advantage (preferred for L2).

Relevant certifications preferred: CompTIA Security+, CEH, CySA

Strong analytical, documentation, and communication skills.

Skills

Email Security, Incident Response, Identity and Access Management, Python

About UST

UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world’s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients’ organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact - touching billions of lives in the process.