Cyber Security Engineer

Ofb Tech; Gurugram District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Ofb Tech in Gurgaon, India, seeks a security professional to lead proactive threat hunting and end-to-end incident response. You will use IOC/IOA, MITRE ATT&CK, behavioral analytics, and endpoint telemetry to detect advanced threats and manage alerts from CrowdStrike Falcon, SentinelOne, Palo Alto Firewalls, IDS/IPS, Windows Event Logs, Microsoft Security Logs, and cloud environments.

You will oversee malware and credential-compromise investigations, containment, and root cause analysis while

Qualifications

• Experience performing proactive threat hunting using IOC/IOA, MITRE ATT&CK, and behavioral analytics to identify threats.
• Ability to monitor and investigate security alerts from CrowdStrike Falcon, SentinelOne, Palo Alto Firewalls, IDS/IPS, Windows Event Logs, Microsoft Security Logs and cloud environments.

Responsibilities

• Perform proactive threat hunting using IOC, IOA, MITRE ATT&CK, behavioral analytics and endpoint telemetry to identify advanced cyber threats.
• Monitor and investigate security alerts from CrowdStrike Falcon, SentinelOne, Palo Alto Firewalls, IDS/IPS, Windows Event Logs, Microsoft Security Logs and cloud environments.
• Investigate and respond to malware, ransomware, phishing, credential compromise, unauthorized access attempts, insider threats and zero-day vulnerabilities while adhering to SLAs.
• Lead end-to-end incident response activities including threat identification, endpoint isolation, forensic analysis, containment, eradication, and root cause analysis.
• Configure, monitor, and optimize endpoint security solutions (EDR/XDR) to strengthen enterprise security posture.

Skills

Threat hunting

IOC/IOA/MITRE ATT&CK

Behavioral analytics

Endpoint telemetry

Incident response

EDR/XDR

Security monitoring

Tools

CrowdStrike Falcon

SentinelOne

Palo Alto Firewalls

IDS/IPS

Windows Event Logs

Microsoft Security Logs

Cloud Environments

Job description

Role & responsibilities

• Perform proactive threat hunting using Indicators of Compromise (IOC), Indicators of Attack (IOA), MITRE ATT&CK Framework, behavioral analytics, and endpoint telemetry to identify advanced cyber threats.
• Monitor and investigate security alerts generated from CrowdStrike Falcon, SentinelOne, Palo Alto Firewalls, IDS/IPS, Windows Event Logs, Microsoft Security Logs, and cloud environments.
• Investigate and respond to malware, ransomware, phishing attacks, credential compromise, unauthorized access attempts, insider threats, and zero-day vulnerabilities while adhering to defined SLAs.
• Lead end-to-end incident response activities, including threat identification, endpoint isolation, forensic analysis, containment, eradication, recovery, and root cause analysis.
• Configure, monitor, and optimize endpoint security solutions (EDR/XDR) to strengthen enterprise security posture.

Preferred candidate profile

• Candidates currently residing in Gurgaon or Delhi NCR will be preferred.
• Must be willing to work from the Gurgaon office.
• Comfortable working in a 5.5-day work week (MondayFriday and alternate Saturdays).
• Immediate joiners or candidates with a notice period of up to 30 days will be preferred.