IT Security Analyst

Overview

You will be part of the global Cybersecurity team with a main focus on Security Operations and Incident Response, covering detection engineering, incident response and continuous readiness.

What you'll do

• Design, test and deploy detections in support of the monitoring and alerting on potential cybersecurity threats
• Adjust existing detections to minimize false positives while avoiding false negatives
• Find chances to improve detection capabilities and translate those chances into action
• Align detection capabilities to organizational risk tolerance
• Take ownership of assigned cybersecurity events, ensuring complete and accurate triage, containment and remediation action
• Partner with collaborators across digital and business operations to drive response actions and restore normal operations
• Identify cybersecurity incident root cause and recommend remediation actions to prevent recurrence
• Create and maintain complete and accurate documentation of assigned cybersecurity event investigations from initial detection through closure, including root cause identification, business impact, response actions, final disposition and event classification
• Provide after-hours or on-call incident support as required
• Monitor threat intelligence, attacker techniques and industry trends to maintain awareness of relevant and emerging cyber threats
• Participate in tabletop exercises, training and post incident review to strengthen preparedness across the team and the organization
• Mentor junior analysts and actively contribute to the team knowledge base and operational maturity
• Recommend improvements to operational processes and documentation

What you'll need

• Bachelor's degree in Cybersecurity, Compute Science, Information Technology or related field
• 8 years of experience in cybersecurity incident response in a global organization
• Experience in detection design and development
• Experience developing and improving cybersecurity playbooks
• Previous experience with Endpoint Detection and Response solutions
• Previous experience with Security Information Event Management solutions
• Previous experience with forensic investigations and evidence handling
• Previous experience with cloud computing platforms

Details

• Location: Bangalore, India
• Provide after-hours or on-call incident support as required