Senior Security Analyst - Cyber Defence Center (5-8 Yrs) Mumbai (Others)

Description : TIER 2 Security Analyst will conduct the investigations of escalated security incidents based on the tiered hybrid SOC monitoring approach.
-The primary purpose of this position is to serve as an expert in providing technical analysis, assessment and mitigation recommendations for escalated security incidents where deep technical knowledge is required.
-Candidate should have the desire to join a dynamic team of world class security experts to SIEM investigation and enhancement, threat hunting.
-The candidate shall have the desire to keep himself/herself abreast with current cyber security trends.
-Ability to work independently in a very large-scale, enterprise setting.
-Previous experience as an SOC analyst for a large financial Institution a plus.
-Demonstrate that you are an effective communicator (both verbally and in writing) and a supportive team player, taking a consultative rather than confrontational approach whilst maintaining the integrity and independence of the Information Security function. Principal Duties/Responsibilities : - TIER 2, Analyst, Cyber Defence Center.
-5 to 8 years of hands-on work experience working in a Security Operating Centre (SOC) or similar.
-Ensure timely response to any cyber incident to minimise risk exposure and production down time.
-Safely acquire and preserve the integrity of cyber security data required for incident analysis to help determine the technical/operational impact, root cause(s), scope and nature of the incident - Sysadmin skills (Linux / Windows); programming / scripting skills (PowerShell or Python).
-Detecting emerging threats based upon analysis, data feeds and sources (internal & external intelligence sources).
-Engaging with IT functions to ensure alerts are actioned appropriately and in a timely manner.
-Working within the team and the wider Information Security group to build new tools for intelligence gathering.
-Building and maintaining senior management dashboards to provide a clear understanding of team activities and threat landscape.
-Active Cyber Threat Hunting & provide recommendations to optimize cyber security based on threat hunting discoveries.
-Reviews asset discovery and vulnerability assessment data. Explores ways to identify stealthy threats that may have found their way inside your network, without your detection, using the latest threat intelligence.
-Analyse and correlate incident data to develop a preliminary root cause and corresponding remediation strategy - Evaluate target systems to analyse results of scans, identify and recommend resolutions - Routinely develop and update incident response playbooks to ensure response activities align with best practices, minimise gaps in response and provide comprehensive mitigation of threats Communications and Relationships : - Internal: With the IT Security Directors and Security Team; Information Security Programme Manager, Project Managers, Risk & Compliance, and IT.
-External: Work with MSS partner. Competencies : - Global Business Knowledge - Cross-Cultural Resourcefulness - Cross-Cultural Agility - Assignment Hardiness - Cross-Cultural Sensitivity - Humility - Conflict Management - Organizational Agility - Customer Focus - Integrity and Trust - Personal Learning Required Qualifications, Skills, Knowledge, Experience : Qualifications : - Qualified to degree level, preferably in IT or security related subject.
-Be interested in developing skills and knowledge in information security, and willing to work towards appropriate professional qualifications.
-OSCP, GSEC, GISF, GCED, CEH. Skills : - Solid understanding of SIEM technologies.
-Scripting and programming skills with proficiency in one or more of the following; PowerShell, Pearl, Python.
-A solid understanding of networking technologies, enterprise wide technologies including database, operating system, web application, middleware, etc.
-Knowledge of computer and network forensics investigations, malware analysis.
-Knowledge of cryptographic protocols.
-Experience with security assessment tools, including Wireshark, Sysinternal tools.
-Experience in other areas such threat assessment, hunting and intelligence, access management, knowledge of VAPT.
-Proven ability to work in global collaborative group environment - Experience working with a high degree of autonomy, managing own workload and delivering to tight timescales - Strong communication skills, both oral and written.
-Team player with good interpersonal skills.
-Organised and methodical.
-Willing to challenge and desire to learn.
-Ability to communicate technical concepts to nontechnical disciplines - Good communication skills, both orally and in writing - Ability to communicate and collaborate effectively with other team members in a geograp...

Required Skills : English