Lead Analyst Opening For Hyderabad location

Role & responsibilities

1. Responding to alerts from across the entire global CLIENT technology and information estate to quickly detect harmful behaviours and events, containing, mitigating, and remediating minor incidents and in coordination with the Cybersecurity Incident Management and Response Team, effectively containing, mitigating, and remediating more serious events. 

2. Supporting cyber security incidents through to eradication and feed into the Post Incident Review process that delivers detailed analysis on the root cause of incidents investigated and produces findings and recommendations that support control adjustments to better protect the bank.

3. Identifying, developing, and implementing new detections (Use cases) and mitigations (Playbooks) across the security platforms.

4. Reviewing and approving new Use Cases and Playbooks created by Cybersecurity colleagues.

5. Continuously reviewing the effectiveness of analysis playbooks, processes, and tooling.

6. Communicating new use cases (go-live, demise, tuning), to the cybersecurity operations teams, supporting the Cybersecurity Operations Manager in ensuring all teams are prepared to take on the additional workload and have sufficient tools, training, and capability to do so effectively.

7. Researching emerging threats and vulnerabilities to aid in the identification of cyber incidents

Required Skills :

5+ years of technical experience in IT or IT Security, for example as a network or operating system administrator.

2. Expert level knowledge and demonstrated experience of common log management suites, Security Information and Event Management (SIEM), EDR, Email Protection, Case Management & other cyber security tools.

3. Expert level knowledge and demonstrated experience of common cybersecurity technologies such as IDS / IPS / HIPS, Advanced Anti-malware prevention and analysis, Firewalls, Proxies, MSS, etc.

4. Good knowledge and technical experience of 3rd party cloud computing platforms such as AWS, Azure, and Google.

Good knowledge and demonstrated experience of common operating systems and platforms to include Windows, Linux, UNIX, Oracle, Citrix, GSX Server, iOS, OSX, etc.

5. CEH, EnCE, SANS GSEC, GCIH, GCIA CISSP or any similar Certifications.