11 дней назад
Senior Security Analyst (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Security Analyst (Cybersecurity): Monitoring and investigating security events for a corporate security operations team with an accent on SIEM monitoring, incident response, threat hunting, and security rule optimization. Focus on developing detection use cases and playbooks, translating threat intelligence into organizational context, and mentoring security analysts.
Location: Gurugram, India
Company
is an international technology group developing security technologies for digital security, financial platforms, and currency technology.
What you will do
- Monitor security alerts and events using SIEM tools, intrusion detection systems, and other monitoring platforms.
- Identify risk scenarios, develop detection use cases, conduct active threat hunting, and triage security events end to end.
- Support IT security incident response and collaborate with IT and other cross-functional teams.
- Develop and optimize playbooks, detection rules, compliance rules, watch lists, and custom reports.
- Create security documentation and help design and document CDC work processes.
- Mentor and train other team members.
Requirements
- Bachelor’s degree or equivalent in Information Technology, Information Security, Engineering, or a related field.
- At least 6–8 years of managed security services or information security experience, including 4 years in security investigations or incident response.
- Proficiency in scripting languages such as Python and data query languages such as SQL.
- Solid understanding of information and cybersecurity, networking concepts, and security tools.
- Expert knowledge of attack strategies, including the MITRE ATT&CK Framework.
- Strong analytical thinking and written and verbal communication skills.
Nice to have
- Exposure to Defender, Sentinel, Splunk, Qualys, and similar security tools.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →