Information Security Analyst III

Overview

SOC Level 2/3 Analyst on the global Cyber Operations team, responsible for continuous monitoring, detection and response to maintain the organization's security posture. Works a rotating 24x7 shift schedule, including night shifts.

What you'll do

• Monitor, analyze, and respond to global security alerts using SIEM/SOAR tools.
• Triage with sandboxing technologies.
• Analyze with threat intelligence tools.
• Investigate and respond to security events, implementing containment and recovery strategies.
• Expedite with AI/ML workflows and capabilities.
• Utilize KQL for querying and correlating data to identify and address threats.
• Develop and manage automated detection rules and playbooks in Microsoft Sentinel.
• Employ Microsoft Defender and MS Purview Data Loss Prevention (DLP) tools to enhance endpoint protection and data security.
• Conduct proactive threat hunting and data forensics to uncover potential threats.
• Utilize advanced threat intelligence platforms to inform and refine threat detection strategies.
• Develop and execute SOC playbooks to improve response and operational efficiency.
• Triage and assist on complex incidents and investigations.
• Collaborate with USA Security escalation teams and departments to enhance overall security posture.
• Assist in developing and refining SOC procedures and best practices.

What you'll need

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 5-10 years of experience as a SOC analyst, preferably with lead responsibilities.
• Strong knowledge of KQL (Kusto Query Language) for querying and analyzing security data.
• Hands-on experience with Microsoft Sentinel, including rule creation, playbook implementation, and workbooks.
• Proficiency in Microsoft Defender and MS Purview Data Loss Prevention (DLP).
• Working knowledge of firewalls, IDS/IPS, and network security protocols.
• Experience in vulnerability management tools: assessments, penetration tests, and threat monitoring.
• Ability to leverage and analyze threat intelligence.
• Proficient in data forensic analysis and investigation.
• Proficient in creating and managing SOC playbooks.
• Strong understanding of incident response processes and procedures.
• Excellent analytical and problem-solving skills.
• Ability to work within a well-managed team.

Nice to have

• Certifications such as CISSP, CEH, or CompTIA Security+.

Details

• Location: Bangalore, Karnataka, India.
• Full time.
• Rotational 24x7 shifts, including night shifts.