Key Facts

Remote From:

Full time

Senior (5-10 years)

English

Hard Skills

MITRE ATT&CK Framework Incident Response Security Operations (SecOps) Cyber Kill Chain Framework OSI Models Distributed Firewall Splunk Log Analysis

Other Skills

•
Physical Flexibility
•
Adaptability

Roles & Responsibilities

Minimum 4 years of experience in security incidents and analysis within a Security Operations Centre (SOC).
Proficiency in log analysis from various security devices such as hosts, networks, firewalls, and IDS/IPS.
Good understanding of Cyber Kill Chain and MITRE ATT&CK framework.
Experience with EDR and SIEM technologies like Splunk.

Requirements:

Monitor and analyze security log data from diverse IT security devices.
Provide incident response support for identified security incidents.
Conduct threat and vulnerability analysis and offer security advisories.
Assess and improve security systems to strengthen cyber resilience.

Job description

Information Security Engineer
Role: Security Analyst
Experience: 5 to 8 years Position: Full time
Job Location: Manikonda Lanco Hills IT Park, Hyderabad Yelahanka, Bengaluru
Shifts: Rotational (247) (includes night shift) Mandatory
Cab Facility: Yes

Below is the JD:The role will serve as the first point of contact for providing support to
security operations responsible for monitoring and fighting threats to an
organizations IT infrastructure. He or she is in charge of assessing security
systems, identifying and patching vulnerabilities, and improving cyber
resilience.

Key Responsibilities
Provide analysis and trending of security log data from a large number of heterogeneous IT security devices.
Provide Incident Response (IR) support when analysis confirms an actionable incident.
Provide threat and vulnerability analysis as well as security advisory services
Monitor and fight threats to an organizations IT infrastructure, and to assess security systems and measures for weaknesses and possible improvements.
Skills Required:Should have a minimum of 4 years of experience with security incidents and analysis as part of the Security Operations Centre (SOC).
Should be familiar with log analysis (host, network, firewall, IDSIPS) from any device.
Good knowledge in understanding Cyber Kill Chain and MITRE ATT & CK framework.
Monitoring and Investigating threats using NextGen Firewall and Email Security Gateway.
Should have deep understanding and experience with EDR & SIEM technologies (Splunk) monitoring and investigations.
Expertise in the knowledge of protocols from different layers of the OSI model
(HTTP, HTTPS, TCPIP, Web Socket, SSH, SFTP, RDP).
Must be able to adjust and adapt to changing priorities in a dynamic environment.
Should be ready and flexible to Support 247 shifts.