Security Analyst

About the Opportunity:

Role: Security Analyst

Location: Gurgaon

About the function:

At MakeMyTrip (MMT), technology is at the heart of everything we do. As a leading player in the travel industry, we leverage cutting-edge solutions like AI, machine learning, and cloud infrastructure to create seamless and innovative travel experiences. We prioritize a tech-first mindset, where our engineering teams lead the charge in transforming the way people travel.

Our culture encourages collaboration, creativity, and thought leadership, empowering engineers to challenge the status quo and develop impactful, game-changing solutions. At MMT, you'll work with the latest technologies, continually push boundaries, and have the chance to shape the future of travel.

Join us and become part of a forward-thinking, tech-driven organization that thrives on innovation and continuous learning.

About the Role:

We are looking for a Security Analyst to join the MakeMyTrip Cybersecurity team and strengthen MMTs defense against evolving cyber threats. This role involves monitoring, analyzing, and responding to security incidents while enhancing our security framework.

The ideal candidate should have 4-6 years of experience in Security Operations, with a strong focus on Endpoint Security and network security controls. Hands-on experience with security tools in these areas is essential. Scripting knowledge is preferable, along with a proactive learning attitude, strong problem-solving skills, and a can-do mindset.

What will you be doing:

• Monitor and analyse security events across endpoints, networks, and cloud environments.

• Implement and manage security controls using various security technologies.
• Ensure strong endpoint protection and respond to threats, vulnerabilities, and suspicious activities.

• Manage and enhance email security to prevent phishing, malware, and other emailbased threats. 
• Work on Zero Trust security principles to enhance access control and identity security.

• Assist in security incident detection, response, and remediation efforts.
• Develop and maintain security policies, procedures, and compliance documentation.

• Collaborate with IT and security teams to strengthen the overall security posture.
• Automate security processes using Python, PowerShell, or Bash.
• Stay updated on emerging threats, vulnerabilities, and security technologies.

 
Qualification & Experience:

• 2-5 years of experience in cybersecurity, focusing on endpoint security, network security, and cloud security.

• Hands-on experience with security tools in areas such as:
• Endpoint Security: EDR, XDR, Incident Response, malware analysis, threat hunting.

• Network Security: NAC, firewalls, IDS/IPS, network segmentation, Zero Trust access.

• Cloud & Web Security: SSE, CASB, Secure Web Gateway, DLP, cloud security posture management

• Email Security: Email analysis, expertise in email authentication protocols, knowledge of modern email-based cyber threats, and integration of threat intelligence

• Strong understanding of Zero Trust security models and implementation.
• Knowledge of security best practices, frameworks, and compliance standards (NIST, ISO 27001, CIS, etc.).

• Experience in security incident investigation, threat intelligence, and vulnerability management.

• Scripting knowledge (Python, PowerShell, Bash) is a plus.
• Familiarity with SIEM tools and log analysis for threat detection.
• Excellent problem-solving skills and a proactive learning attitude.
• Strong communication and documentation skills to convey security insights effectively.