Cybersecurity Incident Response Engineer

1 week ago

Bengaluru, Karnataka, India Global Pharma Tek Full time
Primary Skill Set - SOC - Splunk, Qualys, SIEM
Location – Bangalore
Shift – /
Notice Period – Immediate to month
Experience – + years
Relevant Experience – + years
Job Profile Summary
The Cyber Security Incident Response (CSIR) team is essential in providing an orchestrated and rapid security incident response capability with an oversight of security incident response across wider NTT Managed Security Services clients. The CSIR team utilise various security technologies to identify alerts, prioritize and investigate security issues in a fast-paced environment maintain the level of communication with internal and client stakeholders.
As the CSIR engineer, the typical day can vary greatly depending on the specific position. They may begin their day by looking over dashboards, reports from the previous day or shift, including checking for any new threats and identifying malware that may have infiltrated the system. also prepare for and respond to system breaches or attacks. These processes might differ between Clients, but they generally include responding to hacks or network insecurities and working to prevent new ones.
You will also be required to participate in a shift roster which may comprise of shifts business hours and after hours.
Your key responsibilities will include but are not limited to: Manage day-to-day operations of reviewing SIEM alert and other vulnerability management tools. Ensure that all the various environments within the Client have adequate scans and assessments performed. Research and recommend mitigation strategy for current and future threats relevant to the Clients environment. Participate in security incident response process when required. Support the Security Management Lifecycle including: Real-time Monitoring Incident investigation. Research. Correlation. Trending. Remediation. Setup and configure SIEM, including data analysis, rule creation. establish thresholds, reference lists, and other duties. Setup, investigate, and advanced troubleshooting of log transport agents. Work with Client technology owners and platform leads to ensure vulnerabilities and issues are patched and remediated on time. Oversee the implementation and management of operational security reporting activities. Regularly, meet with the internal team to review security reports, status, review any risks, issues, incidents, and outstanding activities. Vulnerability Management, Malware analysis, Threat hunting and assist in forensic analysis. Managing stakeholder expectations and assisting in the reduction of the impact of a cybersecurity event or incident. Contribute to maintaining knowledge base/playbooks by updating procedural documentation. Actively participate in process improvement with other team members and Wider team. Maintain detailed knowledge of the clients' environment(s), where applicable, by maintaining and updating relevant documentation. Provide proactive, constant, and clear communication on the status of incident/problem resolution between the client, NTT, and any other third-party supplier and vendors. Performs post-mortem analyse with logs, network traffic flows, and other recorded information to identify intrusions by unauthorised parties, as well as unauthorized activities of authorised users. Manage the prevention and resolution of security breaches and ensure that the required incident and problem management processes are initiated to ensure compliance to policy. Conduct presentations of the security breaches findings to the business and advise on new measures required to prevent reoccurrence of similar breaches. What would make you a good fit for this role? (Mandatory skills) Experience in working in Security Operation Centre. Demonstrated genuine interests and passion for cybersecurity, incident problem solving is a must. Working knowledge of security operations environments and security incident management & response handling. Hands-on experience in managing Splunk, other SIEM logging solution like Microsoft Sentinel, ArcSight, LogRythm. Hands-on knowledge on the creation of use cases within SIEM solution including advanced correlation rules. Creating custom dashboards based on the client's security landscape. Ability to filter through false positives quickly and focus on true positives. Analyse and perform fine-tuning of SIEM rules/policies on regular basis. Hands-on experience in analysing SIEM alert payload to detect any malicious activity. Hands-on experience in managing Vulnerability Management solution like Qualys and Tenable experience, Hands-on experience to Analyse logs/events from SIEM solution, other infrastructure, Expertise in interpreting and querying Wireshark captures. Experience in managing Security Incidents detect and response, Threat hunt capability with knowledge of Kill chain methodology. Experience in triaging Threat feeds and work towards mitigation exercise. Experience in reviewing the vulnerability, product bug reports and relating its impact to Clients environment. Good understanding of Digital Forensics concept and the process followed therein. Operational knowledge on Security compliance tools like AlgoSec, Firemom, Skybox or Tufin. Previous experience in working on Firewalls from Palo Alto, Checkpoint, Cisco and Web security solution, End Point Security solutions like Mcafee, Symantec, Trend Micro, FireEye. Required Experience: Extensive experience in a Technology Information Security Industry Prior experience working in a SOC/CSIRT for at least - years Good Hands-on experience on SIEM mainly Splunk solution. Good Hands-on experience on Vulnerability management tools. Tertiary qualifications or a passionate ethical hacker. Experience using End Point Protection Software. Experience with Enterprise Detection & Response software. Knowledge of malware analysis, hacking techniques, latest vulnerabilities, and security trends. Preferably an interest, or knowledge of, or experience with SIEM and IPS technologies. Knowledge of network technologies including routers, switches, firewalls.

  • Cybersecurity Incident Response Engineer

    1 week ago

    Bengaluru, Karnataka, India Global Pharma Tek Full time

    Primary Skill Set - SOC - Splunk, Qualys, SIEMLocation – BangaloreShift – /Notice Period – Immediate to monthExperience – + yearsRelevant Experience – + yearsJob Profile SummaryThe Cyber Security Incident Response (CSIR) team is essential in providing an orchestrated and rapid security incident response capability with an oversight of security...

  • Incident Response Engineer

    1 week ago

    Bengaluru, Karnataka, India DigiCert Full time

    Incident Response Engineer Perform proactive daily monitoring of our services including reviewing system and applications logs and manage Incident life cycle (Detection, Confirmation, Notification, Repair/Isolation, Escalation, Resolution and Reporting) to ensure quick turnaround in service restoration. Repair and recover from hardware or software failures....

  • Cybersecurity Engineer

    1 week ago

    Bengaluru, Karnataka, India Advanced Sterilization Products Full time

    Office Address : #16 Salarpuria Premia (Opp. Cessna Business Park), Sarjapur Outer Ring Road (ORR), Bangalore 560103SummaryThe ASP Senior Cybersecurity Engineer will have a measurable impact in ensuring ASP's success in the application and development of security measures including ensuring their efficiency in combination with security audit and regulatory...

  • Cybersecurity

    1 week ago

    Bengaluru, Karnataka, India NR Consulting - India Full time

    Profile: Cyber securityExperience: 8+ YearsLocation: BangaloreNotice period: 0-30 DaysCyber security withCrowd Strike OR Microsoft Security Stack (specifically Microsoft Sentinel)SOC experience (incidents, monitoring, alert triaging)Scripting experience - Python, Power Shell, KQL etc.Engineering background preferredCompTIA Cybersecurity Analyst CySA+,...

  • Cybersecurity Engineer

    1 week ago

    Bengaluru, Karnataka, India Advanced Sterilization Products Full time

    Office Address : #16 Salarpuria Premia (Opp.Cessna Business Park), Sarjapur Outer Ring Road (ORR), Bangalore 560103SummaryThe ASP Senior Cybersecurity Engineer will have a measurable impact in ensuring ASP's success in the application and development of security measures including ensuring their efficiency in combination with security audit and regulatory...

  • Senior Cybersecurity Engineer

    1 week ago

    Bengaluru, Karnataka, India Burns & McDonnell Full time

    We are looking for a skilled Senior Cybersecurity Engineer to play a crucial role in protecting our digital assets across hybrid cloud environments and proprietary application platforms. This position is ideal for a cybersecurity professional who excels in developing security strategies, enhancing security architectures, and implementing best practices in...

  • Cybersecurity Engineer

    1 week ago

    Bengaluru, Karnataka, India Advanced Sterilization Products Full time

    Office Address : #16 Salarpuria Premia (Opp. Cessna Business Park), Sarjapur Outer Ring Road (ORR), Bangalore Summary The ASP Senior Cybersecurity Engineer will have a measurable impact in ensuring ASP's success in the application and development of security measures including ensuring their efficiency in combination with security audit and regulatory...

  • Digital Forensics and Incident Response Consultant

    1 week ago

    Bengaluru, Karnataka, India Booz Allen Hamilton Full time

    Digital Forensics and Incident Response ConsultantKey Role:Display professional and expert knowledge of incident response processes, tools, and techniques. Handle incident investigation with little oversight and make significant contributions to any incident response efforts. Participate in cyber incident response investigations requiring forensic, malware,...

  • Digital Forensics and Incident Response Consultant

    1 week ago

    Bengaluru, Karnataka, India Booz Allen Hamilton Full time

    Digital Forensics and Incident Response Consultant Key Role: Display professional and expert knowledge of incident response processes, tools, and techniques. Handle incident investigation with little oversight and make significant contributions to any incident response efforts. Participate in cyber incident response investigations requiring forensic,...

  • Project Cybersecurity Engineer

    1 week ago

    Bengaluru, Karnataka, India Alstom Full time

    We are a global leader in designing and manufacturing transportation systems, from high-speed trains to electric buses and driverless trains, alongside infrastructure, signalling, and digital mobility solutions. Job Title & Purpose Job Title: EN-XY-01: Cybersecurity Engineer (CyEng) Purpose of the Job: Perform Cybersecurity activities during contract...

  • Incident Response Sre

    1 week ago

    Bengaluru, Karnataka, India DigiCert Full time

    ABOUT DIGICERTWe're a leading, global security authority that's disrupting our own category. Our encryption is trusted by the major ecommerce brands, the world's largest companies, the major cloud providers, entire country financial systems, entire internets of things and even down to the little things like surgically embedded pacemakers. We help companies...

  • Project Cybersecurity Engineer

    1 week ago

    Bengaluru, Karnataka, India Alstom Full time

    Req ID:446808We create smart innovations to meet the mobility challenges of today and tomorrow. We design and manufacture a complete range of transportation systems, from high-speed trains to electric buses and driverless trains, as well as infrastructure, signalling and digital mobility solutions. Joining us means joining a truly global community of more...

  • Project Cybersecurity Engineer

    3 weeks ago

    Bengaluru, Karnataka, India Alstom Full time

    Req ID:446808 We create smart innovations to meet the mobility challenges of today and tomorrow. We design and manufacture a complete range of transportation systems, from high-speed trains to electric buses and driverless trains, as well as infrastructure, signalling and digital mobility solutions. Joining us means joining a truly global community of more...

  • Principal Cybersecurity Software Engineer

    1 week ago

    Bengaluru, Karnataka, India Advanced Sterilization Products Full time

    Office Address : #16 Salarpuria Premia (Opp. Cessna Business Park), Sarjapur Outer Ring Road (ORR), Bangalore 560103SummaryThe ASP Principial Cybersecurity Software Engineer will have a measurable impact in ensuring ASP's success in the application and development of security measures including ensuring their efficiency in combination with security audit and...

  • Cybersecurity Architect

    2 months ago

    Bengaluru, Karnataka, India Alstom Full time

    Req ID:446153 We create smart innovations to meet the mobility challenges of today and tomorrow. We design and manufacture a complete range of transportation systems, from high-speed trains to electric buses and driverless trains, as well as infrastructure, signalling and digital mobility solutions. Joining us means joining a truly global community of more...

  • Cybersecurity Architect

    1 week ago

    Bengaluru, Karnataka, India Alstom Full time

    Req ID:446153 We create smart innovations to meet the mobility challenges of today and tomorrow. We design and manufacture a complete range of transportation systems, from high-speed trains to electric buses and driverless trains, as well as infrastructure, signalling and digital mobility solutions. Joining us means joining a truly global community of more...

  • Cybersecurity Architect

    1 week ago

    Bengaluru, Karnataka, India Alstom Full time

    Req ID:446153 We create smart innovations to meet the mobility challenges of today and tomorrow. We design and manufacture a complete range of transportation systems, from high-speed trains to electric buses and driverless trains, as well as infrastructure, signalling and digital mobility solutions. Joining us means joining a truly global community of...

  • Principal Cybersecurity Software Engineer

    1 week ago

    Bengaluru, Karnataka, India Advanced Sterilization Products Full time

    Office Address : #16 Salarpuria Premia (Opp. Cessna Business Park), Sarjapur Outer Ring Road (ORR), Bangalore Summary The ASP Principial Cybersecurity Software Engineer will have a measurable impact in ensuring ASP's success in the application and development of security measures including ensuring their efficiency in combination with security audit and...

  • Principal Cybersecurity Software Engineer

    1 week ago

    Bengaluru, Karnataka, India Advanced Sterilization Products Full time

    Office Address : #16 Salarpuria Premia (Opp.Cessna Business Park), Sarjapur Outer Ring Road (ORR), Bangalore Summary The ASP Principial Cybersecurity Software Engineer will have a measurable impact in ensuring ASP's success in the application and development of security measures including ensuring their efficiency in combination with security audit and...

  • Cybersecurity Architect

    1 week ago

    Bengaluru, Karnataka, India ALSTOM Full time

    Req ID:446153We create smart innovations to meet the mobility challenges of today and tomorrow. We design and manufacture a complete range of transportation systems, from high-speed trains to electric buses and driverless trains, as well as infrastructure, signalling and digital mobility solutions. Joining us means joining a truly global community of more...