Posted today · be early

AI Cybersecurity Analyst

Cyber Managed Services Inc. (CyberMSI)

IndiaremotePosted 1 day ago

Skill Required

AI-Security-AnalystCybersecurity-AnalystThreat-Validation-AnalystSecurity-Operations-AnalystSOC-AnalystAI-Data-Security-AnalystCybersecurity-AI-SpecialistAI-Cybersecurity-EngineerCybersecurity-AIAI-CybersecurityAI-Security-EngineerAI-Security-ResearcherCybersecurityAIanalyticalautomationsecurityCloudDesign PatternsSIEMandFulltime

Key highlights

Market competitive base pays and bi-yearly performance-based bonuses
Familiarity with Microsoft Defender XDR and Sentinel SIEM
Up to 20 days paid time off plus government holidays
Opportunity for international work via intra-company assignments

Role overview

CyberMSI is a U.S.-based managed XDR and compliance firm utilizing an "AI + analyst-on-the-loop" SOC model powered by Microsoft Unified Security Operations (Microsoft Defender XDR and Microsoft Sentinel SIEM) to protect AI agents, identities, apps, data, endpoints, multi-cloud, and third-party access. They focus on Accountable & Intelligent automation to accelerate correlation of attack signals, enable rapid threat containment, and execute response actions based on real business context. The company is seeking a high-performing AI Threat Validation Analyst to validate the findings of AI-assisted SecOps agents, ensuring accuracy, context, and appropriate decision-making. This role focuses on confirming the results of automated investigations, refining AI-generated insights, and supporting the operationalization of Microsoft Defender XDR + Sentinel SIEM detection and response workflows to bridge automation with human expertise.

Responsibilities

Validate SecOps agent investigations by thoroughly reviewing the incident attack story, associated alerts, involved entities, and correlated signals to ensure accuracy and completeness.
Ensure SecOps agents and automated workflows executed correctly without technical issues, verifying that investigations ran smoothly and results are reliable.
Confirm the accuracy of incident verdicts by identifying false positives, incomplete investigations, or incorrect threat classifications.
Perform deeper analysis when required, including URL detonation or sandboxing, file analysis, and reviewing customer inventory and context to ensure findings are accurate and relevant.
Validate and apply Incident Management (IM) tags correctly, and approve, modify, or reject automated findings before escalation or response.

Requirements

Strong understanding of fundamental cybersecurity operations and incident analysis.
Familiarity with SIEM and XDR platforms, preferably Microsoft Defender XDR, Sentinel SIEM and SOAR capabilities.
Solid knowledge of common cyber threats and attack techniques based on MITRE ATT&CK®.
Strong analytical thinking and attention to detail with the ability to validate and challenge automated findings.
Clear, professional written and verbal communication skills.

Nice to have

Relevant certification such as SC-200 is desirable.

Benefits

Market competitive base pays and bi-yearly performance-based bonuses.
Monthly allowances for health insurance, laptop, and internet.
Paid time off for up to 20 days every year plus all government holidays.
Opportunity to work internationally from CyberMSI’s locations in the USA, UAE, and other locations through intra-company assignments.
Ongoing training on latest cybersecurity and AI technologies.
Reimbursements for relevant cybersecurity certifications.