Senior Analyst-IT & Information Security-Security Incident Response Management_3377

Allianz Technology; Thiruvananthapuram; Vor Ort; INR 1.500.000 - 2.600.000; Vollzeit

Zusammenfassung

Allianz Technology seeks a seasoned cybersecurity professional to lead threat detection and incident response in cloud and on-premises environments. You will hunt threats, tune detectors, and automate telemetry processing across Azure, AWS, and Kubernetes stacks.

Strong scripting and BI capabilities are essential for building actionable reports and dashboards. You will collaborate with open-source tools and enterprise security platforms, contributing to the detector development lifecycle and

Qualifikationen

• 5+ years hands-on experience with attacker kill-chain, MITRE ATT&CK, and enterprise threats.
• Understand digital forensics and incident response in cloud environments.
• 3+ years with cloud platforms (Azure/AWS/GCP) and container security (Kubernetes).
• 3+ years querying large datasets; building automated reports, alerts, and BI (SQL, Python, PowerBI).
• 5+ years in cyber security, threat detection and incident response; automation experience.
• Strong knowledge of SIEM/EDR/ DLP and related tech.
• Experience with detector/rules (YARA, SIGMA, Snort, Splunk/Elastic).
• Version control for deployment of detectors/rules (GitHub).
• Exposure to backend data structures (JSON, YAML).
• AI/gen AI exposure preferred.

Kenntnisse

Threat hunting

MITRE ATT&CK

Cloud forensics

Azure security

Kubernetes security

Data analysis

Python

PowerShell

YARA/SIGMA/Snort

EDR/SIEM

Git/GitHub

Malware analysis

Network security

Tools

CrowdStrike

SentinelOne

Splunk

Elastic

Volatility

EnCase

Git

Jobbeschreibung

• 5+ years of hands-on experience with a background in the modern attacker kill-chain, MITRE ATT&CK, and emerging enterprise threats.
• Understand digital forensics and incident response as it applies to the cloud
• 3+ years’ experience with Azure\AWS\GCP and\or Kubernetes and containers security.
• 3+ years of experience querying and analysing large datasets, including experience building automated reports, alerting, workflows, and/or business intelligence solutions (e.g. SQL, Python, KQL/Azure Data Explorer, Excel, PowerBI, etc.).
• 5+ years’ experience in cyber security, threat detection, and incident response
• Proven experience with automation and orchestration to effectively handle an extreme volume of telemetry and logs in a timely and efficient manner
• Familiarity with backend data structures used for security analysis (JSON, YAML, etc.)
• Experience using query languages and understanding syntax across EDR or other security platforms
• Experience creating and tuning detectors/rules using commonly known tools such as YARA, SIGMA, Snort, Splunk, Elastic, etc.
• Experience using version control software for the deployment of detectors, rules, or other automations (GitHub)
• 5+ years’ experience in cyber security, threat detection, and incident response
• Strong understanding of network security, malware analysis, and security operations
• Familiarity with security information and event management (SIEM) tools, EDR, DLP and relevant technologies
• Relevant certifications such as Certified Incident Handler (GCIH) or Certified Threat Intelligence Analyst (CTIA) or Certified Threat Hunter (CThH)any industrial hunting certifications.

QUALIFICATION

• 5+ years of hands-on experience with a background in the modern attacker kill-chain, MITRE ATT&CK, and emerging enterprise threats.
• Understand digital forensics and incident response as it applies to the cloud
• 3+ years’ experience with Azure\AWS\GCP and\or Kubernetes and containers security.
• 3+ years of experience querying and analysing large datasets, including experience building automated reports, alerting, workflows, and/or business intelligence solutions (e.g. SQL, Python, KQL/Azure Data Explorer, Excel, PowerBI, etc.).
• 5+ years’ experience in cyber security, threat detection, and incident response
• Proven experience with automation and orchestration to effectively handle an extreme volume of telemetry and logs in a timely and efficient manner
• Familiarity with backend data structures used for security analysis (JSON, YAML, etc.)
• Experience using query languages and understanding syntax across EDR or other security platforms
• Experience creating and tuning detectors/rules using commonly known tools such as YARA, SIGMA, Snort, Splunk, Elastic, etc.
• Experience using version control software for the deployment of detectors, rules, or other automations (GitHub)
• 5+ years’ experience in cyber security, threat detection, and incident response
• Strong understanding of network security, malware analysis, and security operations
• Familiarity with security information and event management (SIEM) tools, EDR, DLP and relevant technologies
• Relevant certifications such as Certified Incident Handler (GCIH) or Certified Threat Intelligence Analyst (CTIA) or Certified Threat Hunter (CThH)any industrial hunting certifications.
• Exposure in AI , gen AI technologies preffered.

KEY COMPETENCIES

• Threat Hunting tools (e.g.: EDR – Crowdstrike, Sentinel One etc)
• Forensic Analysis (e.g. Volatility, EnCase, Autopsy etc)
• Open-source tools and scripts, including YARA for malware detection, Sysinternals Suite for system
• Expert knowledge in Python and PowerShell

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.

We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

Join us. Let's care for tomorrow.