Information Security Analyst- Executive - Vadodara

Key Responsibilities

• Monitor security events and alerts using SIEM (Security Information and Event Management) tools, IDS/IPS (Intrusion Detection/Prevention System), and other security monitoring platforms.
• Investigate and analyze security incidents, identifying the root cause, impact, and recommended remediation actions.
• Conduct in-depth analysis of security logs, network traffic, and other relevant data sources to detect and respond to potential threats.
• Perform real-time incident response activities, including containment, eradication, and recovery, following established procedures and guidelines.
• Collaborate with the SOC analysts, providing guidance and support in investigating and escalating security incidents.
• Stay up-to-date with the latest security threats, vulnerabilities, and industry best practices to enhance incident detection and response capabilities.
• Assist in the development and implementation of SOC processes and procedures, including incident response plans, playbooks, and escalation protocols.
• Provide timely and accurate reporting on security incidents, including the analysis of trends and patterns to support proactive security measures.
• Monitor and maintain endpoint security solutions to detect and prevent malware threats.
• Investigate and respond to malware incidents, providing detailed reports.
• Schedule and manage phishing simulation campaigns to raise employee awareness.
• Analyse phishing simulation campaign results, identifying users at risk and recommending targeted training programs.
• Assist in coordinating Vulnerability Assessment and Penetration Testing (VAPT) with internal teams and external vendors.
• Track vulnerabilities, ensure timely remediation, and document progress.
• Conduct Proof of Concept (POC) evaluations for various security solutions to assess their effectiveness and suitability.
• Document POC findings and prepare recommendation reports for stakeholders.
• Contribute to designing and delivering cybersecurity awareness programs to educate employees on security best practices.