Responsibilities 

<ul>
<li>Security Operations Centre T4 - Experience 7 - 9 yrs. Ready to work in 24*7*365 environment. </li>
</ul>

<ul>
<li>Must have hands on experience in handling security incidents investigations and response in the cloud environment (AWS, Azure). </li>
</ul>

<ul>
<li>Role will involve monitoring, investigating end-to-end and responding to the real time security incidents targeting cloud infra/services/applications. </li>
</ul>

<ul>
<li>Strong Cloud Platform Proficiency - should be well verse with platform like AWS and Azure which is essential for dealing with the security incidents in cloud Should utilize SIEM and other cloud log sources to analyze logs and identify anomalies. </li>
</ul>

<ul>
<li>Splunk: Basic understanding and exposure to Splunk, should be able to query and pull out the required logs. Ability to understand co-relation search, analyze the required logs for investigations. </li>
</ul>

<ul>
<li>Ability to create required dashboards/reports/searches. Should act as a single point of contact for the team for cloud security incidents. </li>
</ul>

<ul>
<li>(including data breach/exfiltration, malware, etc..) Should be good with Investigation of intrusion attempts and perform an in-depth analysis of exploits Responsible for malware analytics by investigating events similar in complexity to Bash attempts and SQL injections. </li>
</ul>

<ul>
<li>Must have extensively worked on Phishing incidents. </li>
</ul>

<ul>
<li>Should have good exposure on SIEM preferably Splunk. Should have expertise on TCP/IP network traffic and event log analysis. </li>
</ul>

<ul>
<li>Cloud and Network Security - understanding protocols and cloud architecture is crucial for incident investigation and response. </li>
</ul>

<ul>
<li>Ability to perform critical analysis and resolve issues independently and differentiate false positives. </li>
</ul>

<ul>
<li>Should be able to contribute to the response activities (contain and mitigate) to address potential security incidents/ breaches effectively, minimizing impact on operations and recommends changes to enhance security systems to improve existing security posture. </li>
</ul>

<ul>
<li>Cross collaboration with other IT teams to ensure coordinated response to security incidents. </li>
</ul>

<ul>
<li>Should help to develop documentation which includes SOPs, playbooks and runbooks. </li>
</ul>

<ul>
<li>Ensure quality and accuracy of junior analysts tickets by completing ticket reviews. Researches security trends, new methods and techniques used in unauthorized access of data in order to proactively eliminate the possibility of a system breach and to ensure compliance with regulations and privacy laws.</li>
</ul>

<ul>
<li>Keep abreast of Cyber Threat Advisories on global threats and critical vulnerabilities; Recommend actions to be taken based on the environment.</li>
</ul>
 
Qualifications Nice to have: 

<ul>
<li>Familiarity with basic system administration and scripting languages e.g. PowerShell, batch, bash (and its various flavors/variations) and other programming/query languages like Java, Python AWS Certified Security - Specialty GCIH - GIAC Certified Incident Handler </li>
</ul>

Lead CyberSecurity Analyst in Pune (UID-8347)

Job Description

Job Details

Skills Required for Lead CyberSecurity Analyst

Job Description for Lead CyberSecurity Analyst

Explore More Opportunities