Associate D&T Analyst – Cyber Security, Incident Response

General Mills, Inc.; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

General Mills is seeking an Associate D&T Analyst – Cyber Security, Incident Response to join our on-site team in Powai, Mumbai. You will investigate threats such as phishing, malware, and compromised accounts, and help stop them before they affect people, systems and brands.

You’ll learn from experienced responders, work with enterprise-grade tools, and collaborate across security and business teams in a global context.

Qualifications

• 2–4 years of incident response experience with hands-on tools.
• Experience investigating phishing and Windows endpoint compromises.
• Knowledge of SIEM, SOAR and network security fundamentals.
• Familiarity with MITRE ATT&CK framework and forensic techniques.

Responsibilities

• Monitor SIEM and related tools for threats or intrusions.
• Investigate alerts including phishing and endpoint compromises.
• Analyze malware in sandbox to extract IOCs.
• Contain threats and meet containment targets.
• Escalate events per incident response plan during shifts.
• Peer review of events for case closes.
• Participate in process improvements and automation projects.
• Collaborate with Cyber and other teams to drive decisions.
• Drive innovative solutions beyond own area.

Skills

SIEM

SOAR

Networking basics

IDS/IPS

EDR

MITRE ATT&CK

Phishing

Windows forensics

MITRE ATT&CK

Scripting (Python/PowerShell)

Education

Bachelor's degree

Tools

Sandbox

SOAR platforms

Threat intel platforms

Job description

## Associate D&T Analyst – Cyber Security, Incident Response應徵: 混合式辦公: Powai, Mumbai, MH: 正職: 今天刊登: 10130741**公司概述**我們致力打造深受全世界喜愛的食物, 但我們所做的遠不止於此。 本公司一向重視正向力量,提供持續學習、探索新視角、重新構想新可能的環境。 我們尋找那些渴望展現最佳自我的人——那些擁有遠大抱負、敢於挑戰彼此、共同成長的思想者。 因為要成為食品領域無可爭議的領導者,就必須匯聚一群積極前瞻、追求突破的人才。### **OVERVIEW**### Be on the front line of defending General Mills. As an Associate Analyst in our Cyber Security Incident Response team, you will investigate real threats such as phishing, malware and compromised accounts, and help stop them before they affect our people, systems and brands.You will learn from experienced responders, get hands-on with enterprise-grade investigation and automation tools.Every day you will work with fellow analysts and team leads, our detection engineering, technology teams and business partners across the globe.### ### **KEY ACCOUNTABILITIES**### * ### Monitor security information and event management (SIEM) and other tools for potential threats, intrusions or compromises.* ### Investigate alerts on reported incidents, including phishing and Windows endpoint compromise.* ### Analyze malware in a sandbox environment to understand its impact and extract key indicators of attack and compromise.* ### Contain threats quickly and correctly, achieving the defined containment time targets.* ### Escalate events according to the General Mills Cybersecurity Incident Response Plan and the defined escalation path, handing over cases at every shift change.* ### Perform peer review of events for open and closed case reviews.* ### Participate in detection fine-tuning and in projects that streamline our processes, including automation.* ### Make timely, high-quality decisions and collaborate across Cyber and other functional teams.* ### Create better solutions through tireless curiosity and innovation, stretching beyond your area of expertise. ### **MINIMUM QUALIFICATIONS**### * ### **Education:**Full-time graduation from an accredited university (mandatory, this is the minimum education criterion and cannot be altered).* ### **Experience:**2-4 years of related work experience, including hands-on experience with incident response processes and tools to detect, analyze, respond to and contain cyber security threats quickly and correctly.* ### **Technical Skills:**SIEM and security orchestration, automation and response (SOAR) technologies, networking fundamentals and protocols, network security (IDS/IPS, firewalls) and endpoint detection and response, cyber security principles and the MITRE ATT&CK framework, deep understanding of phishing tactics and Windows endpoint investigation, forensic techniques to analyze threats, including malware, and extract key indicators of attack and compromise, knowledge of the tools and techniques attackers use to gain unauthorized access to systems.* ### **Soft Skills:**Good communication skills, quick learner with good analytical skills, action-oriented and agile in incident response, able to get things done both independently and in a collaborative, team-oriented environment.* ### **People Management:**Not required. This is an individual contributor role.* ### **Work Requirements:**Ability to work in a 24x7 facility on rotating shifts, on-site in Mumbai.### ### **PREFERRED QUALIFICATIONS*** ### Certifications such as Certified Ethical Hacker (CEH), CompTIA Cybersecurity Analyst (CySA+) or EC-Council Certified Incident Handler (ECIH).* ### Scripting skills (Python or PowerShell) and experience building automated response playbooks.* ### Exposure to cloud security and to threat hunting or threat intelligence platforms.* ### What sets exceptional candidates apart: broad IT knowledge and a strong instinct for knowing when to keep digging until the root cause is found.