This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an AI Cybersecurity Analyst based in India.
This role sits at the intersection of cybersecurity operations and AI-driven security automation, where human expertise is essential to validate and refine machine-generated threat insights. You will work within a modern SOC environment powered by advanced XDR and SIEM technologies, ensuring that automated investigations are accurate, complete, and contextually relevant. The position focuses on bridging AI-driven detection systems with real-world security judgment to improve threat response quality. You will analyze incidents, validate findings, and ensure that security workflows execute correctly across complex digital environments. Working in a fast-evolving cybersecurity landscape, you will contribute directly to improving detection accuracy, reducing false positives, and strengthening operational resilience. This is a highly analytical role where precision, critical thinking, and security expertise directly enhance enterprise threat defense.
Accountabilities:
- Validate AI-driven SecOps investigations by reviewing incident attack narratives, alerts, entities, and correlated security signals for accuracy and completeness.
- Ensure automated investigation workflows execute correctly, identifying and reporting technical issues or inconsistencies in SOC processes.
- Confirm incident verdicts by analyzing and identifying false positives, misclassifications, or incomplete threat assessments.
- Perform deeper technical analysis when required, including file inspection, sandboxing, URL detonation, and contextual investigation using enterprise data sources.
- Review and validate incident management tags and approve, modify, or reject AI-generated findings before escalation or response actions.
- Collaborate with security teams to refine detection logic and improve the reliability of AI-assisted security operations.
- Support continuous improvement of Microsoft Defender XDR and Sentinel-based detection and response workflows.
- Maintain high standards of accuracy, documentation, and operational consistency across security investigations.
Requirements:
- Strong foundational knowledge of cybersecurity operations, incident response, and threat analysis.
- Familiarity with SIEM and XDR platforms, preferably Microsoft Defender XDR and Microsoft Sentinel.
- Understanding of MITRE ATT&CK framework and common attack techniques and threat behaviors.
- Strong analytical mindset with the ability to critically evaluate AI-generated security findings.
- Excellent attention to detail and ability to identify inconsistencies in complex security data.
- Strong written and verbal communication skills for documenting and explaining incident analysis.
- Ability to work in fast-paced SOC environments and handle multiple concurrent investigations.
- Relevant certification such as Microsoft SC-200 is highly desirable.
- Basic understanding of security automation, SOAR concepts, or AI-assisted SOC workflows is a plus.
- Strong curiosity and willingness to continuously learn emerging cybersecurity and AI technologies.
Benefits:
- Competitive base salary with performance-based biannual bonuses.
- Monthly allowances for health insurance, laptop usage, and internet support.
- Paid time off including up to 20 days annually plus all statutory holidays.
- Opportunities for international assignments across global locations including the USA and UAE.
- Continuous training on advanced cybersecurity tools, AI-driven SOC technologies, and industry frameworks.
- Certification reimbursement for relevant cybersecurity qualifications and professional development.
- Exposure to cutting-edge AI + XDR security operations in a high-growth environment.