Associate D&T Analyst – Cyber Security, Incident Response

Overview

Associate Analyst in the Cyber Security Incident Response team, investigating real threats such as phishing, malware and compromised accounts to stop them before they affect people, systems and brands. Works alongside experienced responders, detection engineering, technology teams and business partners globally.

What you'll do

• Monitor security information and event management (SIEM) and other tools for potential threats, intrusions or compromises.
• Investigate alerts on reported incidents, including phishing and Windows endpoint compromise.
• Analyze malware in a sandbox environment to understand its impact and extract key indicators of attack and compromise.
• Contain threats quickly and correctly, achieving the defined containment time targets.
• Escalate events according to the General Mills Cybersecurity Incident Response Plan and the defined escalation path, handing over cases at every shift change.
• Perform peer review of events for open and closed case reviews.
• Participate in detection fine-tuning and in projects that streamline processes, including automation.
• Make timely, high-quality decisions and collaborate across Cyber and other functional teams.
• Create better solutions through tireless curiosity and innovation, stretching beyond your area of expertise.

What you'll need

• Full-time graduation from an accredited university (mandatory minimum education criterion).
• 2-4 years of related work experience, including hands-on experience with incident response processes and tools to detect, analyze, respond to and contain cyber security threats quickly and correctly.
• SIEM and security orchestration, automation and response (SOAR) technologies.
• Networking fundamentals and protocols.
• Network security (IDS/IPS, firewalls) and endpoint detection and response.
• Cyber security principles and the MITRE ATT&CK framework.
• Deep understanding of phishing tactics and Windows endpoint investigation.
• Forensic techniques to analyze threats, including malware, and extract key indicators of attack and compromise.
• Knowledge of the tools and techniques attackers use to gain unauthorized access to systems.
• Good communication skills, quick learner with good analytical skills, action-oriented and agile in incident response.
• Able to get things done both independently and in a collaborative, team-oriented environment.

Nice to have

• Certifications such as Certified Ethical Hacker (CEH), CompTIA Cybersecurity Analyst (CySA+) or EC-Council Certified Incident Handler (ECIH).
• Scripting skills (Python or PowerShell) and experience building automated response playbooks.
• Exposure to cloud security and to threat hunting or threat intelligence platforms.
• Broad IT knowledge and a strong instinct for knowing when to keep digging until the root cause is found.

Details

• Location: Powai, Mumbai, India (on-site).
• Ability to work in a 24x7 facility on rotating shifts.
• Individual contributor role; no people management required.
• Applicants must meet minimum age qualifications in the country in which the job is located.