1 day ago
Bengaluru, India or Hyderābād, IndiaSenior
Responsibilities
- Monitor performance, availability, logs, security events, escalated threats, and suspicious activity across enterprise and development environments.
- Administer, maintain, patch, tune, and manage the lifecycle of security tools and technologies.
- Perform end-to-end security incident handling and response, including attack analysis, malware analysis, network forensics, and computer forensics.
- Manage platform and content engineering activities, including stakeholder requests, escalations, reporting, training, and log-flow issue resolution.
- Investigate incidents, identify root causes, coordinate remediation and preventative measures, and provide service recovery.
- Develop automation opportunities to support the incident response team.
- Document best practices, incidents, resolutions, knowledge articles, and service-level information.
- Coordinate with stakeholders, client IT environments, vendors, and carriers to diagnose and resolve problems.
- Work rotational shifts as part of a 24/7 security operations team.
Requirements
- Bachelor’s degree or equivalent in Information Technology or a related field.
- Seasoned experience implementing and monitoring SIEM or other security tools and working across security technologies.
- Seasoned experience with security technologies including firewalls, IPS, IDS, proxies, EDR, NDR, UTM, SOAR, honeypots, and other security controls.
- Seasoned experience in SOC/CSIRT operations, end-to-end security incident handling, security engineering, diagnosis, troubleshooting, and remote security technology support.
- Knowledge of networking, Linux, security concepts, security architecture, and log collection mechanisms such as Syslog, log files, and DB APIs.
- Strong analytical, logical, problem-solving, organizational, communication, customer service, and teamwork skills.
- Relevant networking certifications such as CCNA, JNCIA, ACCA, PCNSA, or CCSA are preferred.
- Relevant security certifications such as AZ-500, SC-200, Security+, CEH, CISSP, or CISM are advantageous.
Benefits
- On-site working arrangement.
- 24/7 rotational shift schedule.
- Equal opportunity workplace with diversity and inclusion commitments.