Cyber Defence Analyst

Overview

Tier 1 Cyber Defence Analyst in the Cyber Attack Analysis Team (CAAT), detecting, triaging and analysing cyber security events that impact core business platforms, systems, data, assets and reputation.

What you'll do

• Monitor the Group's computer systems for suspicious activity using enterprise-grade cyber tools and critical thought.
• Triage and analyse detection alerts and staff-reported cyber attacks to identify which events require response activities based on Standard Operating Procedures.
• Capture essential details and artefacts for cyber security events.
• Maintain event response documentation, participate in post-mortems, and write event reports.
• Escalate applicable incidents to other accountable functions within the Group (such as Cyber Attack Response, Data Breach, Governance, etc).
• Identify potential new detection logic and escalate to the Detection Engineering team.
• Triage and manage various incidents, events, and queries from the business to the relevant resolver group.
• Contribute to the Continual Service Improvement (CSI) of the team's operations through proactive analysis, engagement, and collaboration with your team.

What you'll need

• 5+ years of experience as a Cyber Security Analyst or in a similar role.
• Knowledge of operating systems, network protocols, and cyber security tools.
• Good analytical and problem-solving skills.
• Proficiency in Splunk or other SIEM tools.
• Proficiency in Microsoft Defender for Endpoints (MDE) or other Endpoint Detection and Response (EDR) tools.
• A good understanding of networking principles.
• Experience in incident management, with a strong emphasis on comprehensive documentation, integrity, and accountability.
• Experience with cloud security and knowledge of cloud platforms such as AWS or Azure.
• The capability to learn fast, and a knack to analyse computer system activity to understand and assess cyber threats.
• An ability to document and explain technical details clearly and concisely for different audiences.
• High level of attention to detail and accuracy.
• Ability to work meticulously under pressure.
• Bachelor's degree or Master's degree in Engineering in Computer Science/Information Technology.

Nice to have

• Relevant certifications such as GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), or GIAC Reverse Engineering Malware (GREM).

Details

• Location: Bangalore, Manyata Tech Park.
• 24/7 shift.
• Work from office.