Associate D&T Analyst - Cyber Security, Incident Response

General Mills; Mumbai; Vor Ort; INR 1.200.000 - 2.000.000; Vollzeit

Zusammenfassung

General Mills in Mumbai seeks an Associate Analyst for our Cyber Security Incident Response team to investigate threats such as phishing, malware and compromised accounts, and to help stop them before they affect our people and systems.

You will learn from experienced responders, work with detection engineering, technology teams and business partners globally, and contribute to automation and process improvements.

Qualifikationen

• Education: Full-time graduation from an accredited university.
• Experience: 2-4 years in incident response with detection, analysis, containment.
• Technical: SIEM, SOAR, networking, IDS/IPS, MITRE ATT&CK, Windows endpoint investigation.
• Soft: Good communication, analytical, independent or team player.
• People Management: Not required.
• Work: 24x7 facility, rotating shifts, on-site in Mumbai.

Aufgaben

• Monitor SIEM and other tools for potential threats, intrusions or compromises.
• Investigate alerts on reported incidents, including phishing and Windows endpoint compromise.
• Analyze malware in a sandbox environment to extract indicators of attack and compromise.
• Contain threats quickly and correctly per defined containment time targets.
• Escalate events per the Incident Response Plan and escalation path.
• Perform peer review of events for open and closed case reviews.
• Participate in detection tuning and automation projects.
• Make timely, high-quality decisions and collaborate across teams.
• Create better solutions through curiosity and innovation.

Kenntnisse

SIEM & SOAR

Networking fundamentals

MITRE ATT&CK

Phishing analysis

Endpoint detection & response

Forensic techniques

Threat intelligence

Ausbildung

Bachelor's degree

Tools

Sandbox analysis tools

Endpoint protection platforms

Jobbeschreibung

COMPANY OVERVIEW

We exist to make food the world loves. But we do more than that. Our company is a place that prioritizes being a force for good, a place to expand learning, explore new perspectives and reimagine new possibilities, every day. We look for people who want to bring their best - bold thinkers with big hearts who challenge one another and grow together. Because becoming the undisputed leader in food means surrounding ourselves with people who are hungry for what's next.

OVERVIEW

Be on the front line of defending General Mills. As an Associate Analyst in our Cyber Security Incident Response team, you will investigate real threats such as phishing, malware and compromised accounts, and help stop them before they affect our people, systems and brands.You will learn from experienced responders, get hands-on with enterprise-grade investigation and automation tools.Every day you will work with fellow analysts and team leads, our detection engineering, technology teams and business partners across the globe.

KEY ACCOUNTABILITIES

• Monitor security information and event management (SIEM) and other tools for potential threats, intrusions or compromises.
• Investigate alerts on reported incidents, including phishing and Windows endpoint compromise.
• Analyze malware in a sandbox environment to understand its impact and extract key indicators of attack and compromise.
• Contain threats quickly and correctly, achieving the defined containment time targets.
• Escalate events according to the General Mills Cybersecurity Incident Response Plan and the defined escalation path, handing over cases at every shift change.
• Perform peer review of events for open and closed case reviews.
• Participate in detection fine-tuning and in projects that streamline our processes, including automation.
• Make timely, high-quality decisions and collaborate across Cyber and other functional teams.
• Create better solutions through tireless curiosity and innovation, stretching beyond your area of expertise.

MINIMUM QUALIFICATIONS

• Education: Full-time graduation from an accredited university (mandatory, this is the minimum education criterion and cannot be altered).
• Experience: 2-4 years of related work experience, including hands‑on experience with incident response processes and tools to detect, analyze, respond to and contain cyber security threats quickly and correctly.
• Technical Skills: SIEM and security orchestration, automation and response (SOAR) technologies, networking fundamentals and protocols, network security (IDS/IPS, firewalls) and endpoint detection and response, cyber security principles and the MITRE ATT&CK framework, deep understanding of phishing tactics and Windows endpoint investigation, forensic techniques to analyze threats, including malware, and extract key indicators of attack and compromise, knowledge of the tools and techniques attackers use to gain unauthorized access to systems.
• Soft Skills: Good communication skills, quick learner with good analytical skills, action‑oriented and agile in incident response, able to get things done both independently and in a collaborative, team‑oriented environment.
• People Management: Not required. This is an individual contributor role.
• Work Requirements: Ability to work in a 24x7 facility on rotating shifts, on‑site in Mumbai.

PREFERRED QUALIFICATIONS

• Certifications such as Certified Ethical Hacker (CEH), CompTIA Cybersecurity Analyst (CySA+) or EC‑Council Certified Incident Handler (ECIH).
• Scripting skills (Python or PowerShell) and experience building automated response playbooks.
• Exposure to cloud security and to threat hunting or threat intelligence platforms.
• What sets exceptional candidates apart: broad IT knowledge and a strong instinct for knowing when to keep digging until the root cause is found.

ELIGIBILITY

Applicants must meet minimum age qualifications in the country in which the job is located.