Overview

Rein was founded to solve one of cybersecurity's toughest challenges: understanding how AI agents and applications behave in real time.

Responsibilities

• Monitor and triage alerts across security tools; distinguish genuine threats from noise and escalate appropriately.
• Investigate suspicious activity, document findings, preserve evidence, and support containment, remediation, and post-incident reviews.
• Run and improve vulnerability-management workflows, including scanning, validation, risk-based prioritization, remediation tracking, and reporting.
• Review security events and logs from cloud and SaaS environments, identifying anomalous behavior, access risks, and control gaps.
• Develop and tune detections, dashboards, playbooks, and automation to improve coverage, response quality, and analyst efficiency.
• Support access reviews, security assessments, audit evidence collection, and compliance activities in partnership with internal stakeholders.
• Partner cross-functionally to investigate complex security scenarios and translate findings into clear, actionable recommendations.
• Track security metrics and communicate risk, trends, and incident updates clearly to both technical and non-technical audiences.
• Stay current on attacker techniques, emerging threats, and security best practices relevant to cloud-native and AI-enabled applications.

Qualifications

• 3-5 years of experience in cybersecurity analyst, SOC analyst, security operations, incident response, or a similar role.
• Hands-on experience investigating alerts and incidents, vulnerability-scanning, and ticketing platforms.
• Working knowledge of common attack techniques, the incident-response lifecycle, vulnerability management, IAM, network security, and endpoint security.
• Ability to analyze logs and security data; basic scripting or query experience in Python, PowerShell, Bash, SQL, KQL, or a comparable language is an advantage.
• Strong written and verbal English communication, sound judgment, and the ability to explain technical issues in business terms.
• Relevant certifications such as Security+, CySA+, SC-200, GCIH, or equivalent are welcome, but practical capability matters more.
• Analytical and persistent - you follow the evidence and do not stop at the first explanation.
• Self-sufficient and highly motivated - you can prioritize effectively and own tasks without hand-holding.
• Calm under pressure, disciplined with sensitive information, and comfortable making risk-based decisions.
• A strong communicator who translates technical concepts into clear business impact and recommended action.
• Honest, direct, collaborative, and solutions-oriented.

Benefits

• Competitive compensation, equity, and benefits.
• A remote role based in India, with close collaboration across a distributed team.
• Flexible PTO and a remote-friendly work environment.
• The opportunity to work closely with the company's leadership team and shape security practices in a high-growth startup.