Security Analyst

We are seeking a Security Analyst to run our SOC and own our compliance with SEBI's Cybersecurity and Cyber Resilience Framework (CSCRF), including all regulatory reporting and documentation, in a fast-paced, low-latency trading environment.

Key Responsibilities:

• As a Security Analyst, you will monitor, detect, and respond to threats across our trading and corporate infrastructure, and own the compliance reporting that goes to SEBI and other regulators. You will work closely with the network, systems, trading, and development teams.
• Own day-to-day SOC monitoring: watch, triage, and act on all security alerts across endpoints, servers, network, and cloud using SIEM, EDR, and other tools
• Investigate and escalate security incidents, and carry out first-level containment and response
• Analyse network traffic, flow data, and IDS/IPS alerts to detect anomalies across environments
• Map the firm's controls and SOC capabilities to CSCRF requirements, run gap assessments, and track remediation with clear owners and timelines
• Own the preparation and timely submission of periodic CSCRF reports, cyber audit reports, and other filings to SEBI
• Perform log analysis and threat hunting, and build and tune SIEM use cases and response playbooks
• Handle incident reporting to SEBI and CERT-In within prescribed timelines
• Support cyber audits, VAPT exercises, and BCP/DR and incident response drills, and drive closure of findings
• Maintain compliance documentation, policies, and audit evidence so the firm is always inspection-ready
• Track regulatory circulars and translate them into actionable internal requirements
• Work with the network team to review firewall rules, segmentation, and exchange connectivity from a security standpoint
• Support vulnerability management and review privileged access to production and trading systems
• Coordinate with trading, systems, and development teams to implement controls that do not impact latency

Preferred Qualifications:

• We're seeking candidates with:
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field
• 2-5 years of experience in a SOC, incident response, or security compliance role
• Strong networking fundamentals (TCP/IP, routing, VLANs, multicast, firewalls) and experience analysing packet captures with tools like Wireshark, Zeek, or Suricata
• Hands-on experience with a SIEM (Splunk, QRadar, Sentinel, or similar) and EDR tools
• Working knowledge of Linux and common attack techniques (MITRE ATT&CK)
• Familiarity with CSCRF, ISO 27001, NIST CSF, or CERT-In directions
• Experience in the financial industry, preferably a SEBI-regulated entity, including preparing regulatory submissions and audit documentation
• Certifications such as CEH, Security+, GCIH, CISA, CISSP, or ISO 27001 Lead Implementer/Auditor
• Scripting or automation experience (Python, SOAR) and familiarity with cloud security (AWS, Azure)
• Strong written communication, analytical skills, and attention to detail

Skills

CSCRF, SEBI, SOC