Security Engineer (L1)

NTT DATA BUSINESS SOLUTIONS; Kolkata District; On-site; INR 600,000 - 1,000,000; Full time

Job summary

NTT DATA BUSINESS SOLUTIONS is seeking an L1 Security Monitoring Analyst to monitor security systems on a 24/7 basis from Kolkata, India. The role focuses on triaging alerts across firewalls, anti-DDoS, malware proxy, and sandboxing tools, with escalation for confirmed incidents and maintaining security posture.

The position requires diligent analysis of Check Point IPS alerts, Palo Alto sandboxing results, and NetScout DDoS monitoring, while documenting incidents and updating records in the

Qualifications

• Performs initial triage on security alerts to determine severity and authenticity.
• Differentiate between false positives and real threats.
• Monitors IPS alerts from Check Point products and analyzes them.

Responsibilities

• Monitor and analyze alerts for firewalls, anti-DDoS, malware proxy, and sandboxing tools.
• Perform initial triage and escalate confirmed incidents to Level 2/3.
• Document security incidents with details and actions taken.

Skills

Security monitoring

Incident triage

Threat analysis

Check Point IPS

Palo Alto sandboxing

NetScout DDoS monitoring

Tools

Check Point IPS

Palo Alto sandboxing

NetScout

Job description

Job Summary

As an L1 Security Monitoring Analyst is a vigilant first responder, responsible for the 24/7 monitoring of security systems. The analyst will monitor and analyze alerts related to firewalls, anti-DDoS, malware proxy, and sandboxing technologies. You will perform initial triage, *escalate* confirmed security incidents, and help maintain the overall security posture of the organization.

• Perform initial triage on all security alerts to determine their severity and authenticity.
• Differentiate between false positives and legitimate security threats.
• Monitor and analyze IPS related alerts from Check Point products.
• Identify and investigate potential network intrusions and malicious traffic patterns.
• Analyze reports from Palo Alto malware sandboxing to determine if a file is malicious, understand its behavior, and identify affected systems.
• Monitor traffic anomalies and alerts from NetScout perimeter DDoS tools to detect and analyze distributed denial-of-service attacks against the network.
• Investigate and document all security incidents and events, recording key details such as the nature of the event, affected assets, and actions taken.
• Escalate confirmed security incidents and complex issues to Level 2/3 analysts or other relevant support teams, providing a detailed handover.
• Follow established incident response procedures for handling standard security events.
• Update and maintain security incident records in the ticketing system, ensuring all information is accurate and up to date.
• Install application patches and signed software updates in order to improve performance, enable additional functionality or enhance security standard including but not limited to Performing Scans, Management of the system, Updating of plugins and patches, etc.
• To maintain the inventory of entire assets of Cyber Security solutions as per scope and maintain and update a database with respect to OS, Database, Webservers, Application details, and IP addresses pertaining to all Security Solutions under the mentioned scope.

Workplace type: On-site