SCRAT-Detection Engineering- Senior Analyst

Overview

Senior Analyst in the Security Operations Center focused on designing, refining and implementing threat detection use cases aligned with the MITRE ATT&CK Framework.

What you'll do

• Collaborate with Threat Intelligence, Incident Response, Forensics and Security Operations teams to craft custom security use cases based on the MITRE ATT&CK Framework.
• Design and execute advanced detection and response strategies using sophisticated security tools and technologies.
• Conduct in-depth analysis of cyber threats, attack patterns, tactics and techniques to distinguish malicious activity from benign activity.
• Stay at the forefront of industry trends and emerging attack vectors.
• Participate in red teaming and penetration testing exercises to validate use cases through real-world simulation.
• Produce and report metrics to leadership and cross-functional teams on the value and effectiveness of use cases.

What you'll need

• Bachelor's degree in information technology, Cyber Security, Computer Science, or related discipline, or equivalent work experience.
• Knowledge of models/frameworks such as Cyber Kill Chain and MITRE ATT&CK.
• Well-developed analytic, qualitative, and quantitative reasoning skills.
• Demonstrated creative problem-solving abilities.
• Experience in security event monitoring, investigation, and the overall incident response process.
• Strong time management skills to balance multiple activities and lead junior analysts as needed.
• Understanding of offensive security, including common attack methods.
• Understanding of how to pivot across multiple datasets to correlate artifacts for a single security event.
• Diverse skill base in product security and information security, including organizational structure and administration practices, system development and maintenance procedures, system software and hardware security controls, access controls, computer operations, physical and environmental controls, and backup and recovery procedures.
• In-depth knowledge in one or more security domains: Security Governance and Oversight, Security Risk Management, Network Security, Threat and Vulnerability Management, and Incident Response and Forensics.
• 5-8 years in Information Security or other Information Technology fields.
• Experience across the following technical concentrations: Network-Based Security Controls (Firewall, IPS, WAF, MDS, Proxy, VPN); Anomaly Detection and Investigation; Host and Network Forensics; Operating Systems; Web Applications and Traffic.
• Experience with EnCase, FTK, SIFT, Splunk, Redline, Volatility, Wireshark, tcpdump, and open-source forensic tools.
• Experience with cloud computing security, network, operating system, database, application, and mobile device security.
• Experience with information security risk management, including conducting information security audits, reviews, and risk assessments.

Nice to have

• Certifications: CISSP, ISSMP, SANS, GSEC, GCFA, GNFA, GIAC and/or GCIH.
• Experience working within the Financial Services Industry.
• Experience creating trending, metrics, and management reports.

Details

• Location: MUFG Global Service Private Ltd., Pune.