Security Analyst, CSOC (R14283)

India · Remote Employee - India · 2-5 years experience · Remote · Posted Oct 6, 2026

At a glance

This newly created role supports Oportun's 24/7 Cyber Security Operations Center by conducting technical analysis of security events and supporting immediate containment, investigation, and remediation.
The Security Analyst also helps strengthen defenses by applying knowledge gained throughout the response process.

Monitor and analyze traffic, security events, and alerts, and advise on appropriate remediation actions.
Review and assess the impact of security incidents and the remediation actions required to address them.
Investigate intrusion attempts and analyze exploits by correlating multiple sources to determine affected systems or data sets.
Follow standard operating procedures for detecting, classifying, documenting, and reporting security incidents.
Analyze network and host-based security appliance logs, including EDR, firewalls, NIDS, HIDS, and system logs, to determine remediation actions and escalation paths.
Independently identify, contain, analyze, document, and eradicate malicious activity in accordance with established procedures.
Escalate intrusion events, security incidents, threat indicators, and warning information to the appropriate client and stakeholders.
Look for practical ways to use AI tools thoughtfully to work smarter, reduce manual work, and make better decisions faster.

You have a bachelor's degree in computer science, information systems, or a related field from an accredited institution, or 2–5 years of relevant experience in SOC, incident response, or cyber forensics.
You have at least 2 years of prior SOC experience, including relevant internships.
You have experience working with Splunk SIEM and analyzing logs from security devices such as firewalls, proxies, and EDR platforms.
You have hands-on experience handling cyber incidents, performing L1 ticket analysis, identifying false positives, and correlating incidents.
You understand network architecture and can connect events logically across systems and environments.
You have working knowledge of the TCP/IP suite and OSI protocol layers, network and systems architecture, and intrusion detection systems.
You understand web application architecture, Active Directory, and major application-layer protocols such as HTTP, SMTP, and DNS.
You understand common malware categories and how they function, including rootkits, trojans, adware, exploits, and fileless malware.
You have strong organizational, time-management, prioritization, documentation, and communication skills, with the ability to work effectively across functional and organizational boundaries.

You have experience working with or partnering closely with network, engineering, and application teams.
You hold a preferred security certification such as Security+ or a similar credential.
You've used AI tools (ChatGPT, Copilot, or similar) to improve your own productivity.

We’re excited to consider talent currently based in India, as well as candidates who are open to relocating to India for this opportunity.

Show all 13 skills