SOC Analyst

Description & Requirements:

Bravura’s Commitment and Mission

At Bravura Solutions, collaboration, diversity and excellence matter. We value your ideas, giving you room to be curious and innovate in an exciting, fast-paced, and flexible environment. We look for many different skills and abilities, as well as how you can add value to Bravura and our culture.

As a Global FinTech market leader and ASX listed company, Bravura is a trusted partner to over 350 leading financial services clients, delivering wealth management technology and products. We invest significantly in our technology hubs and innovation labs, which inspire and drive our creative, future-focused mindset. We take pride in developing cutting-edge, digital first technology solutions that support our clients to achieve financial security and prosperity for their customers.

About The Role

The Security Operations Analyst will support build out of our internal capability and partner closely with our outsourced SOC provider. This role focuses on incident response coordination, security monitoring, vulnerability management and remediation oversight, helping to strengthen our overall security posture through effective operational processes and active stakeholder collaboration.

You’ll play a vital role in ensuring we meet both our internal security obligations and the high expectations of our financial services clients.

What You’ll Do

- Act as the in-house lead for escalations from our third-party MDR/SOC, supporting triage, investigation of alerts from the SIEM, EDR and cloud security tooling (Rapid7 InsightIDR, AWS GuardDuty/CloudTrail), and coordination of incident response

- Investigate security alerts across endpoint, identity, network and cloud environments, correlating available evidence to determine severity, business impact and appropriate response actions.

- Analyse Windows and identity-related security events, including Active Directory, Microsoft Entra ID, Kerberos and NTLM authentication activity, and coordinate investigation and remediation with relevant technical teams.

- Review network security events involving TCP/IP, DNS, firewalls, proxies, VPNs and common enterprise protocols, identifying suspicious behaviour and recommending appropriate follow-up actions.

- Escalate confirmed or complex incidents to the Senior SOC Analyst and the Rapid7 SOC. Support containment and recovery activities

- Document incidents from detection to closure in the ticketing system (Jira/ServiceNow)

- Follow established SOC runbooks and playbooks while contributing to the development, maintenance and continuous improvement of incident response runbooks, playbooks and standard operating procedures (SOPs)

- Support the vulnerability management programme such as scan scheduling, triage, risk prioritisation, and remediation tracking

- Monitor the threat landscape to inform detection and response activities

- Support audits and client due diligence processes where required

Unleash your potential

To be successful in this role, your background and experience will include:

- 3–5 years’ experience in a security operation, incident response, or SOC analyst role (in-house or MSSP/MDR)

- Hands-on experience with an enterprise SIEM. Rapid7 InsightIDR / InsightVM preferred; Splunk, Sentinel, QRadar or equivalent accepted)

- Working knowledge of network security fundamentals, including TCP/IP, DNS, firewalls, proxies, VPNs and common protocols.

- Practical experience investigating security events in Microsoft Windows environments, with working knowledge of Active Directory, Microsoft Entra ID, Kerberos, NTLM and common authentication flows.

- Strong written and verbal communication skills, with the ability to produce clear incident summaries, document evidence, and coordinate actions with infrastructure, application, engineering, and third-party SOC teams.

- Solid understanding of vulnerability management tools and risk-based remediation.

- Familiarity with regulatory and client security expectations in financial services or highly regulated environments

- Knowledge of attack techniques and incident response frameworks (e.g. MITRE ATT&CK)

- Beneficial:
- scripting/automation, cloud security experience (AWS/Azure).
- experience using approved AI-assisted security tools for alert triage, investigation, SIEM query development and reporting, with the ability to validate AI-generated outputs and handle sensitive security data appropriately.
- Industry security certifications are a bonus.

Working at Bravura

Our people are the heart of our business. We work hard to provide a rich employee with experience and a robust framework for ongoing career development.

- Competitive salary and employee benefits scheme.
- Flexible working hours, we value work-life balance.
- Maternity/ Parental (including secondary) leave policy.
- A cab facility is available in Delhi/NCR.
- Meal facility available
- Free Medical Insurance

Corporate Responsibilities Environmental & Health & Safety

- Ensure Annual Training is competed as required.
- Review Annually & Comply with all Company policies related to H&S and Environmental Management Systems
- Report all/any breaches or accidents/near misses immediately when discovered.

So, what’s next?

We make hiring decisions based on your experience, skills and passion so even if you don’t match every listed skill or tick all the boxes, we’d still love to hear from you.

Please note that interviews are primarily conducted virtually and if you require any reasonable adjustments or would like to note which pronouns you use, please let us know.

All final applicants for this position will be asked to consent to a criminal record and background check. Please note that people with criminal records are not automatically barred from applying for this position. Each application will be considered on its merits.