Security Operation Analyst (Threat and Vulnerability Management)

About the role

Appfire is looking for a Security Operation Analyst In this role, you will be responsible for monitoring, assessing, and mitigating security risks within our organization, while supporting security incident and event management as a part of our SecOps team. You will be critical in identifying vulnerabilities, analyzing threats, and implementing robust security measures to safeguard our information systems.As we are a cloud-focused company, so you will be expected to have (preferred) or obtain the necessary skills to identify threats and vulnerabilities in the cloud with providers such as AWS,Azure, and GCP.You will be expected to engage in professional development to maintain continual growth in professional skills and knowledge essential to the position and, thrive in a highly collaborative workplace and actively engage in helping create secure software applications.

You will report to the Manager, SecOps and be a member of the Information Security Team. 

You can choose to work remotely from anywhere across India.   

Your everyday tasks will include:

• Threat Management:
  • Proactively identify, assess, and manage security threats to the organization’s information systems and networks.
  • Develop and implement threat management strategies, including threat hunting, analysis, and response.
  • Leverage threat intelligence sources to understand the evolving threat landscape and to support adjusting defenses accordingly.
  • Collaborate with cross-functional teams to evaluate and mitigate potential threats before they can impact the organization.
• Vulnerability Assessment:
  • Conduct regular vulnerability scans on the organization’s IT infrastructure to identify weaknesses.
  • Analyze scan results and security assessments to determine the risk level of identified vulnerabilities.
  • Work cross-functionally to prioritize vulnerabilities based on their potential impact and likelihood of exploitation.
• Incident Response:
  • Help develop and execute incident response plans.
  • Support the investigation of security events and incidents to determine their cause, impact, and necessary remediation steps.
  • Collaborate with IT and security teams to contain and mitigate threats.
• Risk Management:
  • Evaluate and recommend security controls and countermeasures to reduce risk.
  • Help develop security policies, procedures, and standards to ensure consistent protection across the organization.
  • Report on the organization’s security posture, providing insights and recommendations to senior management
• Security Awareness and Training:
  • Contribute to the development and delivery of security awareness and work with teams across the organization to ensure security policies and procedures are understood and followed.
• Compliance and Governance:
  • Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, SOC2, GDPR, NIST).
  • Participate in security audits and assessments to verify compliance and identify areas for improvement

Skills and experience you'll need to succeed:

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field is preferred.
• 3-5 years of experience in cybersecurity or a related field.
• Strong knowledge of cybersecurity principles, network security, and threat management tools
• Ability to analyze and interpret complex data to identify security threats and vulnerabilities
• Strong problem-solving skills to develop and implement effective security solutions
• Excellent written and verbal communication skills to explain technical concepts to non-technical stakeholders
• Familiarity and hands-on experience with cloud security tools and technologies in AWS, Azure or GCP.
• Relevant certifications such as CISSP, CySA+, CEH, CompTIA Security+, or cloud-specific certifications are preferred.
• Tool & Technologies:
  • SIEM (Security Information and Event Management): Sumologic or equivalent. preferred
  • Vulnerability Scanners: Wiz, Rapid7, Burpsuite, Snyk, preferred.
  • Endpoint Protection: SentinelOne preferred.
  • Network Monitoring: AWS, Azure, GCP cloud security preferred.

Beyond the resume skills that match our culture and this role:

• You are dedicated to elevating client and co-worker experiences, knowing that exceptional work centers on serving others.
• You adapt swiftly to new business demands, understanding that change fuels collective and individual growth.
• You excel in communication, effectively connecting in remote/hybrid environments using tools like Slack, Zoom, and G Suite and through occasional in-person events.
• You have exceptional coaching, mentoring, and people development skills.

We offer:

Financial benefits

• Every Appfire employee is eligible for company equity.

• Remote working allowance up to INR 12,000 per annum (paid monthly).

Skills development benefits

• Access to the Appfire University learning platform – a hub of knowledge, interactive resources, and engaging instructor-led courses designed to fuel your learning journey with unparalleled depth and accessibility.

PTO, health & well-being

• Unlimited paid sick leave in the event of an employee’s own illness or injury.

• 21 working days of paid annual leave.

• 10 days of paid public holidays per calendar year.

• Maternity and paternity leave offerings.

• Group medical insurance: coverage of INR 5,00,000 per annum for a family, including dependents' parents with no additional cost.

• Personal accident insurance: coverage up to INR 15,00,000 for the employee.

• Group term life insurance: coverage up to INR 15,00,000 for the employee.

• Employee deposit linked insurance scheme (EDLI): employees are covered up to an amount of INR 7,00,000 as per the EDLI rules

Volunteering

• 3 fully paid days each year to participate in Appfire Town, Appfire’s Corporate Social Responsibility (CSR) Program.

Other

• Crèche benefit.

#LI-Remote