Cybersecurity Analyst

A bachelor s degree in computer science, engineering, or technology-related field, or equivalent.

Minimum 3-5 years of experience in security domain with exposure to tools such as Crowdstrike, Qualys, Mimecast, MS Defender.

Good understanding of network and security fundamentals and common Internet protocols, specifically DNS, HTTP, HTTPS / TLS, and SMTP

Highly Energetic and Quick Learner

Analytical skills, out-of-box thinking.

Good communication skills with positive attitude.

Willingness to learn new technology.

Knowledge and experience on Python and PowerShell scripting skills are added advantage.

Certifications on any Security Tools (Crowdstrike, Qualys, Mimecast, MS Defender) is an advantage.

Key Qualifications

Responsible for detecting, identifying, and troubleshooting security events from ServiceNow & Security Tools.

Responsible for performing initial triage on emails reported as Phishing and blocked attachments.

Monitoring threat/vulnerability landscape and security advisories

Operational functions are detection, classification, and incident escalation, to the next level Analyst.

Investigate, document, and report on any security threat issues as well as emerging trends!

Coordinate the containment and eradication of malicious activities with internal and external parties.

Notify appropriate business stakeholders about serious security events.

Working with Sr. Analyst SOC Operations for monitoring, analyzing logs from various Security/ Industrial appliances using Industry Standard tools.

Log monitoring and Incident analysis for various devices such as Firewalls, IDS, IPS, Windows Servers and Web servers etc.

Potential to bring any possible security threats or violation of Security Policy to the notice of the Information Security Manager.

Actively investigating the latest Security, Vulnerabilities, Advisories, Incidents and notifies clients.

Understanding of security threats, attack scenarios, analysis, and intrusion detection skills

Assist Audit team in validating SOX compliance, this will be daily activity.

Prioritize security incident through environment awareness and Global Intelligence. Classify incidents by policy and regulatory scope, configuration status management including active services and patch levels.

Sending Security Alert messages on newly found vulnerability to the concerned Security team and respective customers without fail.

Escalation and coordination with the other domains for unresolved incidents.

Responsible for performing monitoring of security events in 24/7 rotational shifts.

Should be willing to work in 24/7 rotational shifts which includes night shift