Technical Lead – Information Security – Cyber Defense

Technical Lead – Information Security – Cyber Defense

Department

Corporate Group

Job Description

Accountabilities:

1. As a Threat Hunter, lead intelligence-driven monitoring and incident response capabilities.
2. Identifying /hunting and profiling threat actors and Tactics, Techniques and Procedures (TTPs)
3. Customising tools to assist in analysis and investigation.
4. Enhancing Threat Intelligence workflow by redesigning process and approach to operationalize the sharing and utilization of actionable intelligence and indicators.
5. Implementing integration/orchestration of existing security infrastructure and indicators.
6. Design and run custom analysis models on (centralized) security event information to discover active threats, including collaboration on the development of use cases when appropriate.
7. As an SME of  Information Security, perform Threat Hunting, Incident Response, Log analysis (statistical modeling, correlation, pattern recognition, etc.) of various Operating systems, Web applications, Network devices, Databases etc
8. Providing mentorship and support to teammates in Threat Intel collection, communication/rapport with other divisions and various levels of leadership, technical expertise
9. Capable of identifying need, driving solutions and providing guidance, in an autonomous manner
10. Accountable for analysis of large amounts of data from various internal sources, including indicator feeds, SIEM and several threat hunting tools, etc.
11. Perform threat operations and hunting and liaison for Threat Intelligence in the Security Operations Center and forensics teams.

Education / Experience / Other Information

• Bachelor degree in Engineering or Graduation in Computer Science degree or equivalent degree
• CISSP, CEH, OEM certifications etc will be an advantage
• 9-12  years of experience in Security technologies, including SIEM deployment, SOC Monitoring, Investigation, Log reviews
• Should have done at least one SIEM deployment at a technical level (not PMO level)
• Should have extensive experience to run SOC operations activities listed below as well as Oversees the SOC team.
• Hand-on experience on implementation / configuration / troubleshooting of various Tech Sec tools
• Knowledge of Threat Intelligence Platforms to collect and aggregate internal and external sources of information for investigation.
• Knowledge to analyze Azure AD logs / MDM / Intune / O365 logs / Firewall logs to then correlate with alerts and incidents
• Ability to independently research and solve technical issues
• Excellent teaming skills
• Proven effective verbal and written communication skills
• Ability to work in and adapt to a changing environment

Open Positions

1

Mandatory Skills

Threat Hunting, Event analysis

Education Qualification

B.E, B.Tech, B.Sc

Experience

8 to 12 Years