← All roles

Security Analyst (Cyber Defense Analyst)

AHEAD· Shared Services – Information Technology
Apply on company site
RemoteFull-timePosted 4mo ago

About the role

AHEAD seeks an experienced Cyber Defense Analyst to monitor, triage, investigate, and report on security events across the enterprise, with emphasis on CrowdStrike Falcon, CrowdStrike NG-SIEM, detection engineering, and response automation. Hands-on role focusing on investigations, detections, and automation to improve security operations.

Responsibilities

  • Independently monitor, triage, and investigate security alerts and escalations across endpoint, identity, email, network, cloud, and application telemetry; determine severity, scope, business impact, and required response.
  • Create, tune, and maintain NG-SIEM searches, dashboards, alerts, parsers, and detections; improve alert fidelity, reduce false positives, add meaningful context, and close visibility gaps identified during investigations or threat hunts.
  • Design and implement automation for alert enrichment, investigation support, ticket creation and updates, evidence collection, reporting, notification, and approved response or remediation actions using Python, PowerShell, APIs, and security-platform workflows.
  • Measure and communicate automation outcomes, including reduced manual effort, faster triage or response, improved consistency, increased coverage, and operational safeguards such as logging, error handling, testing, and human approval points.
  • Conduct proactive threat hunting and threat research across CrowdStrike, NG-SIEM, Microsoft 365, identity, cloud, and other enterprise data sources to identify emerging risks and adversary behavior.
  • Lead or materially support incident response activities, including containment recommendations, scoping, root-cause analysis, evidence preservation, remediation tracking, lessons learned, and post-incident detection improvements.
  • Support the reliability and effectiveness of core Cyber Defense technologies by identifying telemetry, parsing, integration, configuration, and data-quality issues and driving them to resolution.
  • Develop and refine incident response playbooks, automation workflows, operating procedures, and quality controls; mentor or provide technical guidance to less-experienced analysts on investigations and tooling.
  • Partner with infrastructure teams and system owners to validate vulnerability findings, prioritize remediation based on exploitability and business risk, and use automation or reporting improvements to track high-risk issues through closure.

Qualifications

  • 5+ years of information security experience, including 3+ years in enterprise security operations, incident response, detection engineering, or cyber defense.
  • Hands-on experience with enterprise EDR and SIEM platforms; CrowdStrike Falcon and CrowdStrike NG-SIEM experience strongly preferred.
  • Experience creating and tuning detections, reducing false positives, and improving detection coverage.
  • Experience automating security operations with Python, PowerShell, APIs, SOAR, or other workflow platforms.
  • Strong investigation, incident response, documentation, and communication skills across endpoint, identity, email, network, and cloud environments.
  • Familiarity with MITRE ATT&CK, NIST CSF, CIS Controls, or similar frameworks, plus vulnerability management experience with tools such as Tenable or Wiz.

Skills

Required:CrowdStrike FalconCrowdStrike NG-SIEMDetection engineeringAutomationIncident responseMITRE ATT&CK

Benefits

  • Comprehensive health insurance coverage for employees, with options to extend coverage to dependents
  • Paid time off and company holidays, with additional leave benefits per policy
  • Flexible work arrangements
  • Learning and development opportunities to support continuous growth and upskilling
  • Employee wellness initiatives focusing on physical and mental well-being
  • Retirement and statutory benefits in line with India regulations
  • Inclusive and people-first culture with focus on collaboration and ownership
Last updated Oct 21, 2026. Interested? Apply on the company site.
AHEAD logo

About AHEAD

Digital Platforms Engineered for Modern Enterprises

AHEAD accelerates the impact of technology on clients by engineering customized data, developer, and infrastructure platforms that improve IT operations.

Platform SolutionsInfrastructure ModernizationLifecycle ManagementSeamless Integration
Company profileWebsite

More open roles at AHEAD