Information Security Analyst II

Location: Chennai, TN

At Rocket India, we believe that protecting our people, our data, and our clients isn't just a job — it's a mission. Our Security Operations Center is the nerve center of that mission, where sharp minds meet cutting-edge technology to keep threats at bay and innovation moving forward. If you thrive in fast-paced environments, love solving puzzles under pressure, and want your work to directly safeguard the dreams of millions of homeowners, this is where you belong.

About the Role

• As our Information Security Analyst (SOC), you'll be the first line of defense — the one who spots the signal in the noise and drives every case to a clear, documented resolution. Here's what your day-to-day looks like:
• Monitor and triage alerts across SIEM, endpoint detection and response, email security, identity, and cloud security platforms, prioritizing by risk and potential business impact
• Investigate suspicious activity to a conclusion, pivoting across multiple telemetry sources to confirm or rule out malicious behavior
• Classify observed activity against frameworks such as MITRE ATT&CK to support consistent categorization and trend analysis
• Analyze reported phishing, endpoint detections, identity anomalies, and cloud misconfiguration alerts, recording findings and reasoning in the case record
• Review indicators using threat intelligence and malware analysis tooling to establish reputation and observed behavior
• Escalate confirmed or suspected incidents promptly, with a clear summary of what is known, what remains unverified, and recommended next steps
• Apply the incident response lifecycle — detection and analysis, containment, eradication, recovery, and post-incident review — to owned incidents
• Determine blast radius and reconstruct attack timelines by correlating endpoint, identity, network, and log telemetry
• Execute containment actions such as host isolation, account disablement, and indicator blocking
• Collect and preserve evidence while maintaining sound chain of custody
• Support the incident response lead on P1 incidents by providing scoping, evidence, and timeline reconstruction
• Partner with ThreatOps, SecOps Engineering, IT, and application teams to validate findings and coordinate remediation
• Tune detection logic to reduce false positives, documenting rationale and risk accepted for every suppression or threshold change
• Track recurring alert patterns and identify candidates for automation
• Maintain and improve triage runbooks so investigative steps are repeatable across the team
• Participate in tabletop exercises and response drills to build and maintain readiness

About You

Minimum Qualifications

• 1+ year in an information security analyst or SOC analyst role
• 3+ years of experience in a technology role
• Bachelor's degree in information assurance, computer science, or a related field, or equivalent experience
• Hands-on experience with a SIEM, including log search, correlation, and alert triage across large structured and unstructured data sets
• Working knowledge of endpoint detection and response tooling and the investigative workflow it supports
• Proficiency in operating systems (Windows, macOS, Linux/Unix, mobile) and core network theory, including common protocols and basic traffic analysis
• Ability to read and interpret scripts, and to write basic scripts or queries in support of an investigation
• Familiarity with common attacker techniques and a recognized classification framework such as MITRE ATT&CK
• Working understanding of the incident response lifecycle and the ability to apply it to live incidents
• Clear written communication — able to document an investigation so a colleague can pick it up without a verbal handoff
• Schedule flexibility — available to work outside standard business hours, including evenings, weekends, and holidays, as incident severity and volume demand

What You Will Get

At Rocket India, you're not just filling a seat — you're joining a team that invests in your growth, well-being, and future. You'll have access to comprehensive health and wellness benefits, continuous learning opportunities, industry-leading tools and technologies, and a collaborative culture that celebrates wins big and small. We offer competitive compensation, flexible work arrangements, and the chance to work on problems that genuinely matter — protecting the financial futures of millions while building your own career in one of the most dynamic areas of cybersecurity.

About Us

Rocket India, registered as NSM Services Private Limited and formerly Mr. Cooper, is a wholly owned subsidiary of Rocket Mortgage, LLC, headquartered in Detroit, Michigan. As a core part of Rocket's global ecosystem, Rocket India helps shape the future of home financing through technology, innovation, operations, product, and customer-focused solutions. Our teams build scalable platforms and digital experiences that simplify mortgage origination and servicing while supporting Rocket's mission to "Help Everyone Home."

We are committed to providing a fair and inclusive workplace for all team members and applicants. All qualified applicants will receive consideration for employment without regard to sex, religion, caste, disability, or gender identity, consistent with applicable Indian law, including the Constitution of India, the Code on Wages, 2019, the Rights of Persons with Disabilities Act, 2016, and the Transgender Persons (Protection of Rights) Act, 2019. We welcome applications from persons with disabilities and from all sections of society.

Additional Locations: Bangalore, KA