Associate D&T Analyst – Cyber Security, Incident Response

General Mills; Mumbai; Hybrid; INR 1,200,000 - 2,000,000; Full time

Job summary

General Mills is seeking an Associate D&T Analyst in Cyber Security Incident Response to defend against threats on our network and systems. You will investigate phishing, malware, and compromised accounts, using enterprise tools and automation to stop incidents quickly.

You will work with analysts, detection engineering, and business partners across the globe, on a hybrid on-site in Mumbai schedule, developing hands-on skills in incident response and security operations.

Qualifications

• Full-time graduation from an accredited university (mandatory).
• 2-4 years of experience in incident response processes and tools.
• Knowledge of SIEM/SOAR, network security and endpoint investigations.
• Familiarity with MITRE ATT&CK framework and phishing techniques.
• Scripting skills (Python/PowerShell) and cloud security exposure preferred.

Responsibilities

• Monitor SIEM/SOAR and other tools for threats, intrusions, or compromises.
• Investigate alerts on incidents including phishing and endpoint compromise.
• Analyze malware in sandbox to extract indicators of attack.
• Contain threats promptly within defined containment targets.
• Escalate events per IR plan and shift handovers.
• Peer review events for case quality and learnings.
• Contribute to detection tuning and automation projects.
• Make timely decisions and collaborate across teams.

Skills

SIEM & SOAR

Networking fundamentals

IDS/IPS & firewalls

EDR & malware analysis

MITRE ATT&CK

Phishing analysis

Windows endpoint forensics

Threat hunting concepts

Education

Bachelor's degree in CS/IS or related field

Tools

Security monitoring tools

SOAR platforms

IDS/IPS

Firewalls

EDR

Windows endpoint investigation tools

Job description

## Associate D&T Analyst – Cyber Security, Incident ResponseSolicitar: Híbrido: Powai, Mumbai, MH: Tiempo Completo: Publicado hoy: 10130741**INFORMACIÓN GENERAL DE LA EMPRESA**Existimos para hacer alimentos que el mundo ame. Pero hacemos mucho más que eso. Nuestra empresa es un lugar que prioriza el bien común, amplía el aprendizaje, explora nuevas perspectivas y reinventa nuevas posibilidades cada día. Buscamos personas que quieran dar lo mejor de sí: mentes audaces y con gran corazón que se desafían entre sí y crecen juntas. Porque convertirnos en el líder indiscutible en alimentación implica rodearnos de personas con hambre de lo que viene.### **OVERVIEW**### Be on the front line of defending General Mills. As an Associate Analyst in our Cyber Security Incident Response team, you will investigate real threats such as phishing, malware and compromised accounts, and help stop them before they affect our people, systems and brands.You will learn from experienced responders, get hands-on with enterprise-grade investigation and automation tools.Every day you will work with fellow analysts and team leads, our detection engineering, technology teams and business partners across the globe.### ### **KEY ACCOUNTABILITIES**### * ### Monitor security information and event management (SIEM) and other tools for potential threats, intrusions or compromises.* ### Investigate alerts on reported incidents, including phishing and Windows endpoint compromise.* ### Analyze malware in a sandbox environment to understand its impact and extract key indicators of attack and compromise.* ### Contain threats quickly and correctly, achieving the defined containment time targets.* ### Escalate events according to the General Mills Cybersecurity Incident Response Plan and the defined escalation path, handing over cases at every shift change.* ### Perform peer review of events for open and closed case reviews.* ### Participate in detection fine-tuning and in projects that streamline our processes, including automation.* ### Make timely, high-quality decisions and collaborate across Cyber and other functional teams.* ### Create better solutions through tireless curiosity and innovation, stretching beyond your area of expertise. ### **MINIMUM QUALIFICATIONS**### * ### **Education:**Full-time graduation from an accredited university (mandatory, this is the minimum education criterion and cannot be altered).* ### **Experience:**2-4 years of related work experience, including hands-on experience with incident response processes and tools to detect, analyze, respond to and contain cyber security threats quickly and correctly.* ### **Technical Skills:**SIEM and security orchestration, automation and response (SOAR) technologies, networking fundamentals and protocols, network security (IDS/IPS, firewalls) and endpoint detection and response, cyber security principles and the MITRE ATT&CK framework, deep understanding of phishing tactics and Windows endpoint investigation, forensic techniques to analyze threats, including malware, and extract key indicators of attack and compromise, knowledge of the tools and techniques attackers use to gain unauthorized access to systems.* ### **Soft Skills:**Good communication skills, quick learner with good analytical skills, action-oriented and agile in incident response, able to get things done both independently and in a collaborative, team-oriented environment.* ### **People Management:**Not required. This is an individual contributor role.* ### **Work Requirements:**Ability to work in a 24x7 facility on rotating shifts, on-site in Mumbai.### ### **PREFERRED QUALIFICATIONS*** ### Certifications such as Certified Ethical Hacker (CEH), CompTIA Cybersecurity Analyst (CySA+) or EC-Council Certified Incident Handler (ECIH).* ### Scripting skills (Python or PowerShell) and experience building automated response playbooks.* ### Exposure to cloud security and to threat hunting or threat intelligence platforms.