Security Analyst

Coforge; Delhi; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Coforge in Delhi, India is seeking a cybersecurity operations specialist to monitor and respond to alerts, analyze incidents, and coordinate with external monitoring services.

The role requires hands-on experience with MS Sentinel, Qradar, MS Defender and vulnerability management tools, plus threat intel gathering and publishing advisories.

You will help develop incident response playbooks, runbooks and ensure KRIs/KPIs are tracked and reported.

Qualifications

• Monitor and analyze security alerts, events, and incidents to identify threats.
• Investigate incidents to determine root cause, scope, risk and impact, and coordinate with third-party monitoring.
• Hands-on with MS Sentinel/Qradar, MS365 Defender, vulnerability management tools, and email security.
• Knowledge of threat hunting and incident response practices.
• Develop and implement incident response plans, runbooks, playbooks, and procedures.
• Collaborate with IT to implement security controls and tooling.
• Maintain understanding of emerging threats and countermeasures.
• Participate in security incident response exercises to test preparedness.
• Support monitoring of KRIs and KPIs and publish cyber security reports.
• Gather information from threat intel sources and publish advisories.

Responsibilities

• Monitor and analyze security alerts, events, and incidents.
• Investigate security incidents to determine root cause and impact.
• Coordinate with third-party security monitoring for timely remediation.
• Develop and implement incident response playbooks and procedures.
• Work with IT to implement security controls and tools.
• Stay updated on emerging threats and countermeasures.
• Participate in incident response exercises and reporting.

Skills

Threat hunting

Incident response

KRI/KPI monitoring

Cyber security reporting

Collaboration with IT team

Tools

MS Sentinel

Qradar

MS Defender

CyberArk

Thycotic Pam

Vulnerability management

Nessus

Tenable.io

Threat intel

Recorded Future

Email security

Mimecast

Job description

Tools/skills Required: MS Sentinel/Qradar, MS Defender, CyberArk/Thycotic Pam, Vulnerability management, Nessus, Tenable.io, Threat intel, Recorded future, Email security, Mimecast.

• Monitor and analyze security alerts, events, and incidents to identify potential threats and vulnerabilities.
• Investigate security incidents to determine root cause, scope, Risk and impact, and coordinate with the third-party security monitoring service to ensure timely response and remediation.
• Fluent Handon on MS Sentinel/Qradar, MS 365 Defender, Vulnerability management Tools, Email Security.
• Possess Knowledge of Threat hunting and
• Develop and implement incident response plans, Runbooks, Playbooks, and procedures to minimize the impact of security incidents.
• Work with other members of the IT team to implement security controls and tools to detect and prevent security incidents.
• Maintain a deep understanding of emerging threats, vulnerabilities, and attack techniques, and recommend appropriate countermeasures.
• Participate in security incident response exercises to ensure that the organization is prepared to respond to real-world incidents.
• Support the monitoring of KRI (Key Risk Indicators) and KPI (Key Performance Indicators) and the creation of cyber security reports.
• Provide your support for gathering information from our Threat Intel and other external sources and publish cyber security advisories and bulletins.