Lead Cybersecurity Specialist - India

Overview

The Senior Security Specialist serves as the first line of defence for security-related communications received on the generic security mailbox, performing advanced investigations, driving process improvement, and acting as the primary escalation point for complex mailbox security incidents.

What you'll do

• Continuously monitor Target's primary security mailbox and take action on incoming emails according to severity.
• Investigate and handle initial escalations raised from security mailbox incidents and issues.
• Act as primary coordinator between stakeholders and Triage to handle called-out incidents and issues.
• Review incoming alerts and submissions and allocate or take action accordingly.
• Channelize periodic security reports or guide them in the right direction.
• Prioritise requests based on risk and severity from the generic security mailbox.
• Ensure adherence to response SLAs, which vary according to email severity.
• Perform initial screening, categorization, routing, and deeper investigation of emails in the security mailbox.
• Analyse phishing submissions and investigate suspicious email activity.
• Perform root cause analysis for serious issues triggered through the mailbox.
• Support and coordinate with stakeholder teams to contain threats.
• Review suspicious links and domains in emails and take appropriate action.
• Assess suspicious attachments and take action or inform the right security teams.
• Validate reported security concerns with security teams and initiate action.
• Identify indicators of compromise (IOCs) that may affect Target.
• Ensure accurate documentation of serious cases and drive them to closure.
• Respond to security-related inquiries, educate users on security best practices, and provide clear guidance to reporters.
• Escalate incidents according to severity, coordinate with Cyber Defence teams, and engage Incident Response teams when required.
• Ensure critical incidents receive immediate attention.
• Contribute to knowledge articles, identify recurring attack patterns, and recommend process improvements.
• Participate in team training activities and mentor analysts, ensuring quality assurance and developing operating procedures.

What you'll need

• Experience in MS Office 365, Security+, or Certified SOC Analyst.
• Email security fundamentals and basic knowledge of security threats delivered through email.
• Knowledge of phishing techniques used against organisations and how to handle and act on phishing attempts.
• Malware fundamentals and social engineering attacks.
• Analytical thinking and good communication skills with ownership and accountability.

Nice to have

• 3-4 years of cybersecurity experience.
• Experience in SOC, security operations, or security mailbox management for a large organisation.
• Experience handling phishing and security investigations.
• Experience working towards metrics, SOPs, and KPIs in a large team with a focus on results.

Details

• Location: Bangalore, India.