Information Security Analyst- L2

POSITION Title : Information Security Analyst-L2

Reporting To: Manager

Work Location: Bangalore

SUMMARY OF POSITION AND OBJECTIVES:

Eurofins is ramping up the Security Operations Center and has a need to extend the L2 incident resolvers team. The person working in L2 SOC team receives incidents escalated from L1 SOC, gets to manage the findings and work towards remediation of the incidents found. He/she continuously operates the Security Incident process, driving the resolution of identified issues, as part of the team, bringing the necessary experience and expertise above the L1 SOC level.

The role requires working in shift mode (24/7), after the initial ramp up period.

POSITION & OBJECTIVES : (maximum 1000 characters (not including spaces) for posting on Eurofins website and career portals):

Job Description:

• Monitoring and analysis of cyber security events with use of SIEM, IDS, EDR, antivirus, Internet Footprint tools, proxy solutions.
• Security Event Correlation as received from L1 SOC or Incident Response staff or relevant sources to determine increased risk to the business.
• Recognize potential, successful, and unsuccessful intrusion attempts/compromises thorough review and analysis of relevant event detail and summary information.
• Development and execution of SOC procedures.
• Educating and coaching the L1 colleagues.
• Triage security events and incidents, detect anomalies, and report/direct remediation actions.
• Ensure confidentiality and protection of sensitive data.
• Analysis of phishing emails reported by internal end users for cases going above L1.
• Working with remediation (IT Infra & Ops) teams on events and incident mitigation.
• Follow up on remediation activities.
• Support the SOC Manager in his duties (e. g. extension of SOC services to new sites).
• Support L3 colleagues as required.

Technical Knowledge :

• Strong working knowledge of security-relevant data, including network protocols, ports and common services, such as TCP/IP network protocols and application layer protocols (e. g. HTTP/S, DNS, FTP, SMTP, Active Directory etc. ).
• Experience and keen understanding of cybersecurity tools, including SIEM, IDS/IPS, antivirus and endpoint detection & response solutions.
• Experience in developing and maintaining Play/Runbooks and/or Standard Operating Procedures in a SOC environment.
• Strong troubleshooting, reasoning, and analytical problem-solving skills.
• Ability to communicate technical details effectively in writing and verbally to junior IT personnel and management.
• Keen on further developing oneself in the information security world and the security operations.

Personal Qualities:

• Team player.
• Detail oriented.
• Excellent communication with technical leaders.
• Systems Thinking - the ability to see how parts interact with the whole (big picture thinking).
• Able to work under minimal supervision.

EVOLUTION:

The position performs in a Threat Researcher role. The Analyst will use advanced network and host based tools that will proactively search through datasets to detect and respond to imminent and potential threats that evade traditional security solutions. Candidate should be capable of clear communicating to varying audience across the organization, in addition to seeking and building consensus where it is needed to achieve a strengthened security posture.

What we offer:

• Opportunity to grow in a demanding, fast-growing organization.
• Very attractive, multicultural, and friendly work environment in fast-growing international company (with more than 55 000 employees).
• Possibility to grow and make the next step in your professional career and self-development.
• A launch pad into various opportunities - within many business lines of Eurofins globally.
• A chance to become part of a highly motivated international team of professionals

Qualifications

• Master s degree or Bachelor s degree (B. E, B. Tech) or equivalent
• Minimum of 2-3 years of professional experience as a SOC Analyst (L1 or L2), threat researcher or hunter or a similar comparable role dealing with incident handling, alert tracking, cybersecurity case management.