Principal Analyst - SOC | On-site, Bangalore

This team provides 24/7 support.  This role requires shift flexibility, including the ability to rotate between days, mids, and nights.  The Principal Analyst will provide deep-level analysis for client investigations utilizing customer-provided data sources, audit, and monitoring tools at both the government and enterprise levels. The Principal Analyst will work closely with our Technology Engineers, Architects, and Threat Analysts to service customers.  How you'll make an impact Operate independently in a geographically dispersed team, while maintaining situational awareness and keeping the team up to date   Perform security monitoring and incident response activities across the networks, leveraging a variety of tools and techniques   Detect incidents through proactive “hunting” across security-relevant data sets   Thoroughly document incident response analysis activities   Review investigations conducted by more junior analysts to ensure quality standards are met   Develop new, repeatable methods for finding malicious activity across the networks   Provide recommendations to enhance detection and protection capabilities   Regularly present technical topics to technical and non-technical audiences   Develop and follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of information security incidents   Prioritize multiple high-priority tasks and formulate responses/recommendations to customers and team members in a fast-paced environment   Provide assistance to other security teams   Continually develop new technical skills and push overall team capabilities forward   Engage with and mentor other team members   Work with other teams on major engineering and architecture initiatives    Be innovative with their understanding of attack methodologies, malware analysis, malicious toolkits, and how those may manifest within various security technologies   Advanced proactive threat hunting    Understands advanced adversary emulation concepts    Advanced use case design for insider threat, operational, threat detection and response    Review of defensive and detective controls to reduce client attack surface  What we’re looking for 9+ years of hands-on cybersecurity operations experience across complex security investigations, incident response, threat hunting, detection engineering, and security control assessment in enterprise environments. Experience in Cortex XSOAR, Proofpoint, Egress, MS Azure, MS Defender, Azure ADX, Crowdstrike. Advanced understanding of the cyber threat landscape and adversary TTPs, with extensive experience applying MITRE ATT&CK to investigations, threat hunting, detection engineering, adversary behavior analysis, and detection coverage assessment.