Sr Analyst - Global Business Services - IN
UnitedLex Bengaluru, Karnataka, India
Legal Services · 1,001-5,000 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
The analyst will provide incident response as part of a 24x7 Security Operations Center and manage security vulnerabilities across the organization. They will also collaborate with business and technology stakeholders to mitigate risks and ensure effective scanning of production environments.
What they look for
Requirements
Candidates must hold a bachelor's degree and possess 4-7 years of experience in security operations and incident response. Expert knowledge of networking protocols and hands-on experience with common security technologies like IDS, Firewalls, and EDR are required.
Full description
- Bachelor’s degree.
- 4-7 years of experience of working in Security operations and Incident response. L2/L3 resource preferrable.
- A passion for, and deep understanding of, vulnerability and threat management.
- Vulnerability Management.
- Inhouse SOC team member (preferrable).
- Must have expert networking protocol knowledge.
- Able to demonstrate an understanding of current offensive / defensive computing and forensics.
- Should be able to provide threat Intel services.
- Prior experience detecting, analyzing and/or responding to security incidents.
- Demonstrated ability to analyze and correlate information from a wide variety of enterprise technologies.
- Good Communication skills.
- Hands-on experience with common security technologies (IDS, Firewall, Rapid7, EDR, Microsoft security suite etc.)
- Understanding of common security threats, attack vectors, vulnerabilities, and exploits
- Shift work, with flexibility to cover both day and nighttime shifts.
Should be able to work independently with Vendors and drive the calls whenever
Responsibilities
- Provide incident response as part of the 24x7 Security Operations Center
- Manage the security vulnerabilities and risks across WB including identifying, supporting application/system owners to manage risks and remediate vulnerabilities.
- Work closely with both business-oriented executives and technology-oriented personnel to ensure adequate processes are in place and actions are being taken to mitigate identified risks proactively.
- Develop strategies to identify, manage, and mitigate identified threats and vulnerabilities to attain desired risk profile and communicate strategies to key stakeholders.
- Produces and regularly evaluates all TVM programs and process related documentation.
- Ensure effective and complete scanning of the test, corporate and production environments.
- Create projects within the tool and monitor the progress & regular follow ups with Patching team and application & server owners.
- Monitoring of events & alerts from a multitude of technologies to detect malicious activity.
- Detailed analysis using a variety of tools and techniques to investigate, navigate, correlate, and fully understand security incidents of the data available.
- Conducts initial triage of security events and incidents. Facilitates communication within the SOC and documents progress throughout the Incident Response Lifecycle.
- Recognizes potential, successful, and unsuccessful intrusion attempts and compromises through reviews and correlation with different security tools.
- Proper escalation and hand-off of security incidents for containment and remediation.
- Tuning of rules, filters, and policies for detection-related security technologies to improve accuracy and visibility.
- Jumping on the call with Vendors and other teams to discuss issues / to get their requirements and deliver the same in the form of projects.
