Information Security Analyst II

At Rocket India, we believe that protecting our people, our data, and our clients isn't just a job — it's a mission. Our Security Operations Center is the nerve center of that mission, where sharp minds meet cutting-edge technology to keep threats at bay and innovation moving forward. If you thrive in fast-paced environments, love solving puzzles under pressure, and want your work to directly safeguard the dreams of millions of homeowners, this is where you belong.

As our Information Security Analyst (SOC), you'll be the first line of defense — the one who spots the signal in the noise and drives every case to a clear, documented resolution. Here's what your day-to-day looks like:

Monitor and triage alerts across SIEM, endpoint detection and response, email security, identity, and cloud security platforms, prioritizing by risk and potential business impact

Investigate suspicious activity to a conclusion, pivoting across multiple telemetry sources to confirm or rule out malicious behavior

Classify observed activity against frameworks such as MITRE ATT&CK to support consistent categorization and trend analysis

Analyze reported phishing, endpoint detections, identity anomalies, and cloud misconfiguration alerts, recording findings and reasoning in the case record

Review indicators using threat intelligence and malware analysis tooling to establish reputation and observed behavior

Escalate confirmed or suspected incidents promptly, with a clear summary of what is known, what remains unverified, and recommended next steps

Apply the incident response lifecycle — detection and analysis, containment, eradication, recovery, and post-incident review — to owned incidents

Determine blast radius and reconstruct attack timelines by correlating endpoint, identity, network, and log telemetry

Execute containment actions such as host isolation, account disablement, and indicator blocking

Collect and preserve evidence while maintaining sound chain of custody

Support the incident response lead on P1 incidents by providing scoping, evidence, and timeline reconstruction

Partner with ThreatOps, SecOps Engineering, IT, and application teams to validate findings and coordinate remediation

Tune detection logic to reduce false positives, documenting rationale and risk accepted for every suppression or threshold change

Track recurring alert patterns and identify candidates for automation

Maintain and improve triage runbooks so investigative steps are repeatable across the team

Participate in tabletop exercises and response drills to build and maintain readiness

About You

Minimum Qualifications

1+ year in an information security analyst or SOC analyst role

3+ years of experience in a technology role

Bachelor's degree in information assurance, computer science, or a related field, or equivalent experience

Hands-on experience with a SIEM, including log search, correlation, and alert triage across large structured and unstructured data sets

Working knowledge of endpoint detection and response tooling and the investigative workflow it supports

Proficiency in operating systems (Windows, macOS, Linux/Unix, mobile) and core network theory, including common protocols and basic traffic analysis

Ability to read and interpret scripts, and to write basic scripts or queries in support of an investigation

Familiarity with common attacker techniques and a recognized classification framework such as MITRE ATT&CK

Working understanding of the incident response lifecycle and the ability to apply it to live incidents

Clear written communication — able to document an investigation so a colleague can pick it up without a verbal handoff

Schedule flexibility — available to work outside standard business hours, including evenings, weekends, and holidays, as incident severity and volume demand

What You Will Get

At Rocket India, you're not just filling a seat — you're joining a team that invests in your growth, well-being, and future. You'll have access to comprehensive health and wellness benefits, continuous learning opportunities, industry-leading tools and technologies, and a collaborative culture that celebrates wins big and small. We offer competitive compensation, flexible work arrangements, and the chance to work on problems that genuinely matter — protecting the financial futures of millions while building your own career in one of the most dynamic areas of cybersecurity.

Rocket India, registered as NSM Services Private Limited and formerly Mr. Cooper, is a wholly owned subsidiary of Rocket Mortgage, LLC, headquartered in Detroit, Michigan. As a core part of Rocket's global ecosystem, Rocket India helps shape the future of home financing through technology, innovation, operations, product, and customer-focused solutions. Our teams build scalable platforms and digital experiences that simplify mortgage origination and servicing while supporting Rocket's mission to "Help Everyone Home."

We are committed to providing a fair and inclusive workplace for all team members and applicants. All qualified applicants will receive consideration for employment without regard to sex, religion, caste, disability, or gender identity, consistent with applicable Indian law, including the Constitution of India, the Code on Wages, 2019, the Rights of Persons with Disabilities Act, 2016, and the Transgender Persons (Protection of Rights) Act, 2019. We welcome applications from persons with disabilities and from all sections of society.