Cyber Security Analyst II

Job Description Summary
Pandi is seeking a skilled Cyber Security Analyst with 3-5 years of experience to support security operations, cloud and identity protection, AI security, and security compliance initiatives. This role focuses on protecting AI-enabled systems, Microsoft Entra ID / Microsoft 365, Cisco Secure Access, and Splunk, while also supporting alignment with common security frameworks and regulatory requirements.


The ideal candidate balances hands-on technical investigation with an understanding of security controls, audit readiness, and compliance-driven security practices. This position is onsite and in person.

Job Description

RESPONSIBILITIES

• Security Operations & Monitoring: Monitor, investigate, and respond to security events using Splunk SIEM, Microsoft Defender, and Cisco Secure platforms; perform alert triage, root cause analysis, and incident containment across cloud, identity, network, and AI systems; build and maintain Splunk dashboards, alerts, and correlation rules to support detection and compliance reporting.

• Cloud Security: Secure and monitor Microsoft Entra ID (Azure AD), Conditional Access, MFA, and Privileged Identity Management (PIM); investigate identity-based attacks including token theft, MFA fatigue, impossible travel, and privilege escalation; support security configuration and monitoring of Microsoft 365 workloads (Exchange, SharePoint, OneDrive, Teams).

• AI & Emerging Technology Security: Assist in securing AI platforms, services, and integrations, including access controls, APIs, and data pipelines; identify and help mitigate AI-related risks such as data leakage, prompt injection, model misuse, and unauthorized access; partner with engineering and data teams to align AI implementations with security and compliance requirements.

• Network & Zero Trust Security: Support deployment, configuration, and monitoring of Cisco Secure Access and Zero Trust network access controls; analyze network and access logs for suspicious or non-compliant behavior; assist in policy tuning to balance secure access with user experience.

• Security Compliance: Support compliance efforts aligned with common security frameworks and standards (e.g., NIST, ISO 27001, SOC 2, CIS); assist with audit preparation, evidence collection, and validation of security controls; help track and remediate security gaps identified through risk assessments, audits, and vulnerability scans; ensure security monitoring and controls align with regulatory and contractual requirements; provide support to ensure cybersecurity and data privacy compliance pursuant to SEC rules and regulations, including Regulation S-P.

• Threat Intelligence / Vulnerability Management: Track emerging threats and vulnerabilities related to cloud, identity, AI, and enterprise systems; participate in vulnerability management, remediation tracking, and control validation; map threats and incidents to the MITRE ATT&CK framework and applicable compliance controls.

• Documentation & Collaboration: Document incidents, investigations, security procedures, and compliance-related evidence; maintain security playbooks and incident response documentation; collaborate with IT, cloud, engineering, and compliance stakeholders to improve security posture.

QUALIFICATIONS

• 3-5 years of experience in cybersecurity, SOC operations, or security engineering.

• Bachelor's degree in Computer Science, Cybersecurity, or related field.

• Hands-on experience with Splunk (search, dashboards, alerts).

• Strong working knowledge of Microsoft Entra ID (Azure AD) and Microsoft 365 security.

• Experience with Cisco Secure Access, Zero Trust, or secure remote access solutions.

• Familiarity with security compliance frameworks (NIST, ISO, SOC 2, CIS, or similar).

• Understanding of modern attack techniques and cloud security risks.

• Experience supporting incident response and audit or compliance activities.

• Strong analytical, documentation, and communication skills.

• Preferred - experience securing or monitoring AI/ML platforms or AI-enabled applications.

• Preferred - relevant certifications (e.g., Microsoft SC-200, SC-300, AZ-500; Splunk Core Certified Power User / Admin; Cisco Security; CompTIA Security+, CySA+, or similar).

• Preferred - experience with SOAR playbooks, automation, or scripting (Python, PowerShell).

• Preferred - exposure to multi-cloud or hybrid environments.