Senior Security Analyst

We Help the World Be Everyday ReadyTM

Responsibilities

• Provide overall guidance, instructions, and mentorship to other Security Analysts
• Perform assessment and security investigation based on advanced analysis tasks across the endpoint, server, and network and provide recommendations.
• Perform remediation actions wherever applicable.
• Coordinate Incident investigations and perform deep dive analysis on detected threats.
• Understand and identify indicators of attack and compromise in alerts, by looking for through data, and from review of investigation notes.
• Have full understanding of the MITRE ATT&CK framework. Mapping custom use cases to tactics and techniques.
• Update documentation and runbooks to avoid repeatable alerts.
• Document recommendations and guidelines based on results of analysis.
• Analyse, review, and provide raw log data for more insight into escalations through SIEM.
• Maintain current understanding of threat landscape.

Requirements

• 5 or more years of progressing/in-depth IT security experience. Practical experience in a senior role within the last three years and demonstrated ability to perform the responsibilities of the job.
• Previous Experience with any of the two leading SIEM like Splunk, Sentinel, Chronical.
• Previous experience on any of the EDR tools like - Defender, SentinalOne, CrowdStrike.
• Advanced knowledge SIEM platform and query language (KQL or SPL.)
• Have at least one industry certification Sec+, CEH SC200, Cloud Fundamental Security knowledge.
• Prior knowledge of SOAR platform such as Siemplify, Forti soar.
• Understanding of Phishing and email header analysis.
• Contribute on whitelisting, Tuning management.
• Experience in SOC and Incident Response activities.
• Expert-level Analysis of security events.
• SIEM content management knowledge.
• Basic scripting or development experience will be an added advantage.

Additional information