Security Analyst

NK Securities Research is a leading financial firm that leverages cutting edge technology and sophisticated algorithms to trade the financial markets. Founded in 2011, we have gained invaluable experience in the field of High Frequency Trading across different asset classes.

We are seeking a Security Analyst to run our SOC and own our compliance with SEBI's Cybersecurity and Cyber Resilience Framework (CSCRF), including all regulatory reporting and documentation, in a fast-paced, low-latency trading environment.

As a Security Analyst, you will monitor, detect, and respond to threats across our trading and corporate infrastructure, and own the compliance reporting that goes to SEBI and other regulators. You will work closely with the network, systems, trading, and development teams.

Own day-to-day SOC monitoring: watch, triage, and act on all security alerts across endpoints, servers, network, and cloud using SIEM, EDR, and other tools

Investigate and escalate security incidents, and carry out first-level containment and response

Analyse network traffic, flow data, and IDS/IPS alerts to detect anomalies across environments

Map the firm's controls and SOC capabilities to CSCRF requirements, run gap assessments, and track remediation with clear owners and timelines

Own the preparation and timely submission of periodic CSCRF reports, cyber audit reports, and other filings to SEBI

Perform log analysis and threat hunting, and build and tune SIEM use cases and response playbooks

Handle incident reporting to SEBI and CERT-In within prescribed timelines

Support cyber audits, VAPT exercises, and BCP/DR and incident response drills, and drive closure of findings

Maintain compliance documentation, policies, and audit evidence so the firm is always inspection-ready

Track regulatory circulars and translate them into actionable internal requirements

Work with the network team to review firewall rules, segmentation, and exchange connectivity from a security standpoint

Support vulnerability management and review privileged access to production and trading systems

Coordinate with trading, systems, and development teams to implement controls that do not impact latency

Preferred Qualifications:

We're seeking candidates with:

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field

2-5 years of experience in a SOC, incident response, or security compliance role

Strong networking fundamentals (TCP/IP, routing, VLANs, multicast, firewalls) and experience analysing packet captures with tools like Wireshark, Zeek, or Suricata

Hands-on experience with a SIEM (Splunk, QRadar, Sentinel, or similar) and EDR tools

Working knowledge of Linux and common attack techniques (MITRE ATT&CK)

Familiarity with CSCRF, ISO 27001, NIST CSF, or CERT-In directions

Experience in the financial industry, preferably a SEBI-regulated entity, including preparing regulatory submissions and audit documentation

Certifications such as CEH, Security+, GCIH, CISA, CISSP, or ISO 27001 Lead Implementer/Auditor

Scripting or automation experience (Python, SOAR) and familiarity with cloud security (AWS, Azure)

Strong written communication, analytical skills, and attention to detail

Competitive salary package

Opportunity to work in a dynamic and collaborative environment

Career growth and development opportunities

Catered breakfast and lunch