Cybersecurity Advisor

Primera Medical Technologies; India; On-site; INR 2,800,000 - 4,600,000; Full time

Job summary

Primera Medical Technologies seeks an experienced Cybersecurity Advisor to lead SOC operations, drive incident response, and build a world-class forensics team. You will train staff, develop response processes, and integrate intelligence into monitoring activities, coordinating with leadership for enterprise-wide security operations.

The role requires strong hands-on experience with SIEMs, CERTs/CSIRT, and threat hunting, with a focus on improving response time and incident management across the

Qualifications

• Bachelor's degree in information systems, Computer Science, or related field
• 7+ years of experience in Cyber Security
• 5+ years of experience with defensive Cyberspace operations
• 4+ years hands-on with SIEM technologies (LogRhythm, Splunk, QRadar)
• 4+ years experience in Incident response process and handling
• 3+ years experience in network intrusion detection
• Experience delivering large-scale, scalable tech infrastructure solutions
• Knowledge of cyber security management, vulnerabilities, risk assessment

Responsibilities

• Lead and participate in CERTs and CSIRT operations
• Oversee SOC operations including monitoring, detection, and response to events
• Manage L2/L3 SOC analysts and incident responders
• Perform real-time log analysis and correlation
• Assess incidents and escalate as needed
• Ensure incident response SLAs and communication protocols
• Maintain information privacy and security measures
• Provide operational oversight of service delivery
• Collaborate with partners to deploy technical solutions
• Train and motivate SOC staff
• Manage project scopes, timelines and budgets
• Review designs of major information systems and changes

Skills

SOC leadership

incident response

log analysis

threat hunting

communication

team training

Education

CISA

CISM

CSCS

CIPP

CISSP

CIA

GPEN

GWAPT

SANS GIAC/GSEC

CEH

Tools

LogRhythm

Splunk

QRadar

Job description

Job Description

The Cybersecurity Advisor is responsible for the Security Operations Center Activity. This role will help develop innovative and effective procedures for the Security Operations Center to enhance response time, coordination and incident response operations, and build a world class team of Cyber Security Incident Response and forensics experts. Train staff on security concepts, develop incident response and forensics management process, write correlations, and integrate intelligence data into monitoring and operations activities. The Security Director/Manager will coordinate with company leadership for the development, implementation, and maintenance of security operations processes across the enterprise.

Responsibilities

• Lead and participate in the Computer Emergency Response Team and the Computer Security Incident Response Team
• Lead day-to-day SOC Operations, ensuring continuous monitoring, detection and response to security events and incidents.
• Manage L2/L3 SOC analysts, incident responders and threat hunters fostering a high-performance culture
• Perform accurate and precise real-time analysis and correlation of logs/alerts from a multitude of client devices with a focus on the determination of whether said events constitute security incidents
• Analyze and assess security incidents and elevate to resources or appropriate internal teams for additional assistance
• Ensure adherence to incident response SLAs, escalation paths and communication protocols.
• Maintain measures to ensure information privacy, information security, and information assurance
• Establish and operate security events and log-monitoring delivery.
• Provide operational oversight of service delivery and ensure deliverables are timely and of high quality
• Possess Significant theoretical and practical knowledge in Exploits, vulnerabilities, network attacks
• Possess Theoretical and practical knowledge in Packet analysis tools (tcpdump, Wireshark, ngrep, etc.)
• Possess Significant theoretical and practical knowledge in Regular expressions
• Identify/implement improvements to business processes, methodologies, and client communication methods.
• Perform Training, monitoring, and motivating a diverse group of SOC Analysts
• Manage project scopes and timelines, and assist in managing project budgets
• Participate in reviewing the design and development of significant new information systems and applications, and participate in the design and development of any significant changes to existing information systems and applications
• Maintain relationships with appropriate technology partners, both internal and external, that will aid in the development, deployment, and support of technical solutions

EDUCATION, EXPERIENCE, TRAINING

The successful applicant must possess one or more current, applicable professional/technical certifications, such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Security Compliance Specialist (CSCS), Certified Information Privacy Professional (CIPP), Certified Information Systems Security Professional (CISSP), Certified Internal Auditor (CIA), GPEN, GWAPT, SANS GIAC/GSEC, or CEH

Bachelors degree in information systems, Computer Science, or related field or equivalent or an equivalent number of years of experience

7+ years of experience in Cyber Security

5+ years of experience with defensive Cyberspace operations

4+ years of handson experience in SIEM technologies like LogRhythm, SPLUNK, QRadar etc.

4+ years of experience in Incident response process and incident handling

3+ years of experience in network intrusion detection

Specific experience delivering largescale, scalable technology infrastructure solutions to support rapid business growth

Advanced knowledge of Cyber Security management practices, network and application vulnerability assessments, change control, business continuity planning, data privacy and risk assessment practices

Experience working with log management, security monitoring, vulnerability management and security incident/event management tools

Experience with Cyber incident management, response and reporting procedures

Knowledge of network monitoring, analysis, troubleshooting, and configuration control technologies

Knowledge of TCP/IP communications and how common protocols (SMTP, HTTP, POP3, IMAP, etc.) and applications work at the network

Inquisitive, critical thinker with business risk awareness, professional skepticism, and sound judgment

Practical leader, capable of creating and implementing plans to achieve strategic objectives

Capable of gaining support for initiatives through influence and the use of business rationale

Ability to work under the pressure and stress of deadlines

Ability to think independently and provide self and group direction, solve various problems and make informed, rational decisions

Ability to research, assimilate information from both IT and business functions, apply strong problem IT and business functions, apply strong .