Back
Oracle logo

Security Analyst — Integrated Security Operations Center

Oracle · Posted Oct 27

Cloud infrastructure, enterprise software, database systems, and AI-powered business applications

Bengaluru, IndiaFull-timeOnsiteMid Level1–4 years₹9.0L–₹16.0L yearly39 applicants
Cloud ComputingEnterprise SoftwareDatabaseArtificial IntelligenceInformation TechnologyPublic Company
Be an early applicantFull time

Get a personal compatibility score

Add a resume for personal matches

About the role

Oracle is establishing a new Integrated Security Operations Center (ISOC) in Bengaluru to monitor, investigate, and respond to security alerts across its technology environment. The team uses SIEM, EDR, identity, email, network, and cloud security platforms for 24x7 alert triage, incident response, detection engineering, and threat intelligence. This role focuses on alert investigation and authorized response, with opportunities to support incident response, detection tuning, threat hunting, and security improvement projects on rotating shifts.

What you will do

  • Monitor and investigate alerts from SIEM, EDR, identity, email, network, and cloud security platforms.
  • Correlate logs and evidence to assess alert validity, severity, scope, and business impact.
  • Follow response playbooks; perform authorized containment and remediation; escalate complex or high-impact issues.
  • Maintain clear investigation records, document decisions, and provide thorough shift handoffs.
  • Partner with security, IT, and business teams to resolve issues and strengthen response quality.
  • Support incident response through evidence collection, timeline development, scoping, containment, and recovery.
  • Contribute to post-incident reviews and improvements to playbooks, procedures, and operational knowledge.
  • Identify recurring alert patterns, workflow gaps, and automation opportunities.
  • Help develop, test, tune, and document detection rules to improve coverage and reduce false positives.
  • Review relevant threat intelligence and apply it to investigations and detection improvements.
  • Support indicator validation and guided threat-hunting activities.
  • Contribute to projects such as onboarding security data sources, evaluating tools, improving reporting, and building lightweight automation.
  • Take on additional security operations responsibilities aligned with business needs and development goals while maintaining operational coverage.
  • Plans and performs in-depth security assessments across a variety of products and services to identify potential vulnerabilities.
  • Creates testing tools to help engineering teams identify security-related weaknesses.
  • Conducts security design and provides recommendations and guidance for improvement.
  • Participates in reviews of security alerts.
  • Recognizes and escalates complex security violations to senior team members.
  • Follows protocols to take appropriate actions needed to contain and mitigate events.
  • Contributes to post-event reviews to identify areas for improvement.
  • Contributes to compliance assessments to identify gaps and ensure compliance with internal and external obligations.
  • Reviews security compliance deliverables and ensures adherence to policies and industry standards.
  • Implements measures to ensure compliance with internal and external obligations , collaborating with relevant stakeholders.
  • Maintains inventory systems from a security perspective.
  • Contributes to the development of business continuity and disaster recovery plans, processes, and procedures.
  • Ensures the execution of business continuity plans to support critical organizational systems and data in the face of disruptions.
  • Participates in assessing readiness for certification and/or audit to identify areas for improvement.
  • Provides security best judgment and recommends best practices of data security using various tools and techniques such as encryption, hashing, masking, and access management to ensure the confidentiality and integrity of sensitive information.
  • Reviews documentation and procedures to identify areas for improvement in data security practices.
  • Demonstrates advanced knowledge of industry security practices and seeks opportunities to expand knowledge through self-study and training.
  • Stays updated on emerging trends to stay ahead of evolving threats and vulnerabilities.
  • Explores novel techniques to solve unique security problems.
  • Independently manages work, monitoring timelines and deliverables to ensure projects or initiatives stay on track and meet requirements. Proactively prioritizes work and adapts to resource or timeline shifts, suggesting adjustments to maintain project efficiency.
  • Collaborates across teams to align on expectations and achieve shared objectives. Builds and maintains a comprehensive understanding of business, stakeholder, and/or customer needs to build and support effective partnerships. Actively listens to diverse perspectives and asks questions to ensure understanding of others.
  • Independently identifies and addresses standard and non-standard issues in accordance with standard practices, escalating more complex issues as appropriate. Analyzes data and/or information from multiple sources to troubleshoot standard and non-standard errors. Contributes to knowledge sharing and best practices.
  • Embraces continuous learning by actively seeking to build knowledge and new skills and/or tools and staying current with industry trends and best practices. Seeks out and leverages feedback and training to improve skills. Contributes to a culture of continuous learning and knowledge sharing with team members.
  • Develops ideas and recommends updates to increase the efficiency and effectiveness of processes, protocols, and workflows within a team. Seeks input from team members on alternative approaches and methods for improving work.

Skills used in this role

What the employer is looking for

  • Foundational knowledge of security operations, common attack techniques, and incident investigation.
  • Familiarity with Windows, Linux, networking, authentication, and enterprise or cloud services.
  • Experience with—or practical exposure to—security alerts, logs, and tools such as SIEM or EDR.
  • Strong analytical judgment and the ability to follow procedures while knowing when to escalate.
  • Clear written and verbal communication skills, including strong documentation and cross-shift collaboration.
  • Willingness to work scheduled shifts, including nights, weekends, and public holidays.
  • Typically 1–4 years of relevant experience in security operations, incident response, IT operations, or a related field. Strong internships, labs, projects, or equivalent practical experience are also welcome.
  • A degree in cybersecurity, computer science, or a related field—or equivalent practical experience.

Preferred qualifications

  • Experience investigating phishing, malware, suspicious authentication, endpoint, or cloud security events.
  • Familiarity with MITRE ATT&CK and threat-informed investigations.
  • Basic scripting or query skills in Python, PowerShell, SQL, KQL, or SPL.
  • Exposure to SOAR platforms, detection development, or incident response exercises.
  • Certifications such as Security+, CySA+, or security-platform certifications. Helpful, but not required.

Benefits and support

  • Compensation and benefits are detailed in the job posting

About Oracle

Oracle logo

Oracle

Company website
LinkedInXCrunchbaseGlassdoor★3.8

Oracle Corporation is a multinational computer technology company specializing in cloud-engineered hardware, enterprise software, and database management systems. It provides comprehensive cloud solutions such as Oracle Cloud Infrastructure (OCI) and Oracle Cloud Applications (OCA) to power digital transformations globally. Headquartered in Austin, Texas, Oracle is a major player in enterprise AI integration and database solutions.

Industry
Cloud Computing
Company size
141000 employees
Founded
1977
Location
Austin, Texas, USA
Funding stage
Public Company

Funding

Public Company · $56B raised

Glynn Capital
  • 2025-10-24Post IPO Debt$18B
  • 2025-02-03Conventional Debt$18B

Leadership

LJ

Lawrence J. Ellison

Chairman of the Board and Chief Technology Officer

CM

Clay Magouyrk

Chief Executive Officer

MS

Mike Sicilia

Chief Executive Officer

HM

Hilary Maxson

Chief Financial Officer

JE

Jae Evans

Global Chief Information Officer and Executive Vice President

Recent coverage

Apply