Senior Information Security Analyst

NRI FT India; Kolkata District; On-site; INR 700,000 - 1,000,000; Full time

Job summary

A leading cybersecurity firm in Kolkata seeks a Security Incident Manager to oversee incident handling and analysis using SIEM technology. The ideal candidate will possess strong analytical abilities and detailed knowledge of network defenses. Responsibilities include conducting threat intelligence analysis, managing incidents across various security domains, and performing root cause analyses. Excellent communication skills are desirable. This role offers an opportunity to work at the forefront of cybersecurity.

Qualifications

• Understanding of network defense principles and common attack vectors.
• Sound knowledge of SIEM Technology preferably ArcSight.
• At least elementary knowledge across infosec domains.

Responsibilities

• Handle security incidents with various SIEM tools.
• Perform root cause analysis of critical incidents.
• Conduct threat intelligence analysis to identify attackers.

Skills

Analytical skills

Attention to detail

Network security knowledge

Experience with SIEM tools

EDR technologies experience

Tools

ArcSight

Splunk

Qradar

Crowdstrike

Carbon Black

Job description

• Security Incident Handling with SIEM Technology. (Experience in any SIEM Tools. e.g. Arcsight, Splunk, Qradar)
• Security Incident Analysis with Logs from various devices like Firewall, Windows, Unix, NextGen FW, WAF, AV,EDR, MDR etc.
• Should have strong analytical ability and attention in detail to handle incidents.
• Should have a broad understanding of all stages of incident response.
• Carries out in-depth threat intelligence analysis to find the perpetrator, the type of attack, and the data or systems impacted.
• Hands on experience on EDR technologies, like crowd strike, MS defender, carbon black etc.
• Uses internal and external threat intelligence to search for anomalous behavior, test security controls and perform advanced asset protection.
• Identify areas for automation and orchestration to make the overall process more effective and efficient.
• Perform root cause analysis of critical incidents and conduct lessons learned with the team.
• Understanding of network defense principles, common attack vectors, and attacker techniques.
• Sound knowledge in Network and Infrastructure related concepts.
• Sound knowledge of SIEM Technology preferably ArcSight.
• Hands on experience on EDR and MDR (e.g. Crowdstrike, Carbon Black, MS Defender)
• Threat and Incident management experience

Required Skill Set

• At least elementary knowledge across infosec domains.
• Good Proficiency in at least one of Network Security/SIEM Alert analysis & Incident Management/Application Security/Pen-Testing & Vulnerability Assessment
• Good conceptual knowledge on different types of attacks as well as Incident Management.
• Exposure to Elastic SIEM will be a plus
• Excellent Communication skills are desirable