Lead Security Analyst

Monitor AWS GuardDuty, CloudTrail, WAF, and endpoint/EDR alerts; triage and escalate per defined runbooks.

Tune detection rules and reduce alert noise; maintain a documented inventory of detections, owners, and severities.

Operate and improve SIEM/log pipelines; ensure critical workloads, S3 buckets, and identity events are within scope.

Track threat intelligence relevant to healthcare and the Indian regulatory landscape; advise on emerging risks.

Serve as first responder for security incidents; lead initial containment, evidence preservation, and stakeholder updates.

Maintain and exercise the incident response playbook, including ransomware, data exfiltration, account compromise, and insider misuse scenarios.

Coordinate with external IR retainers, cyber insurance, and forensics partners during major incidents.

Run periodic configuration reviews using CSPM/CNAPP tooling; prioritize and drive closure of high-risk findings.

Conduct quarterly audits on adherence to security policies.

Monitor secrets exposure, public S3 surfaces, IAM drift, and privileged access usage.

Support hardening of MDM, endpoint protection, and email security controls.

Introduce and guide on best practices of security management.

We are hiring a Lead Security Engineer to strengthen detection, response, and compliance posture.

The role complements our existing application security and penetration testing function, focusing on day-to-day monitoring of cloud and endpoint signals, incident triage and response, vendor and access reviews, and operational support for security and privacy compliance.

You will work closely with the IT, DevOps, and Legal teams.