REMOTEFULLTIME
Security Analyst III
Deepwatch
Remote · remote · Posted 4d ago
Sourced from
Undisclosed5–10 yrsfulltimeRemote
Your match
?
Sign in to see your match score, skill gaps & tailored resume.
Section · 01
About this role
Job Summary
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Deepwatch is looking for a highly motivated, self-driven, technical analyst dedicated to making a difference in global security by protecting organizations against the most advanced attackers in the world. The Deepwatch Security Operations Center offers opportunities to expand your skill set through a wide variety of experiences, detecting and responding to incidents as they occur in real-time for our customers.
This is a remote position based in Bangalore, requiring alignment with US business hours (11:30 PM to 7:30 AM IST). Candidates should be located in or near Bangalore, with the flexibility to work from our local office for team collaboration, meetings, and company events as needed.
Reports to: Senior Manager Cyber Operations
In this role, you'll get to:
- Act as an escalation point for alert triage processes across security technologies and multiple platforms including Windows, Linux and macOS
- Provide in depth analysis from escalated requests originating from any team member who needs support
- Validate suspicious events by performing investigations using SIEM and SOAR technologies
- Leverage Deepwatch proprietary tooling, OSINT, TTPs and IOCs
- Act as a key resource for Management, providing opportunities for improvement and actionable recommendations on creating efficiencies
- Identify gaps in customer environments, data ingested or configuration errors which reduce telemetry quality
- Collaborate directly with leadership and customers to highlight and resolve security concerns
- Provide investigative support to analysts and train others on a regular basis
- Produce high-quality written and verbal communications, recommendations, and findings to customer management in a timely manner
- Further hone your skills and capabilities through hands-on experience and the Deepwatch learning development program.
- Engage in peer review sessions to evolve and enhance analysis quality.
To be successful in this role, you'll need to:
- 5+ years of experience in cybersecurity or SOC environment
- 5+ years of hands-on experience with SIEM platforms, Splunk required (Google SecOps Microsoft Sentinel preferred) with the ability to perform queries and leverage various log sources to perform investigations
- Proven ability to collaborate with global teams across time zones and partner with U.S.-based leadership to ensure continuous security operations.
- Proven experience in incident response and threat hunting
- Possess strong understanding of cyber security principles, concepts and practices which includes the ability to perform a complete and thorough incident investigation and triage as the final point of escalation
- Possess comprehensive knowledge of Splunk SIEM, alongside the capability to utilize alternative platforms like Google SecOps or Microsoft Sentinel, ensuring smooth console navigation, optimized query execution for streamlined investigations, and precise alert evaluations.
- Have working knowledge of modern EDR tools like CrowdStrike SentinelOne, email security, and cloud identity platforms.
- Have confidence to autonomously resolve complex investigations
- Effectively meet client expectations ensuring action items are tracked to completion while maintaining transparent communication with peers and leadership.
- Have advanced knowledge of Adversary Tactics, Techniques, Procedures (TTP), Event Logging, and Event Triage
- Demonstrate the ability to pivot to other log sources, cloud systems or consoles to perform a comprehensive analysis from multiple data sources.
- A desire to support others and uplift the program and team through updating training materials and SOPs
- Hands-on experience utilizing enterprise ticketing systems such as ServiceNow, Jira, or similar case management tools.
- Demonstrate the ability to write well-written reports and analysis that s thorough, accurate and complete
- Monitor and manage incoming security alerts against strict operational SLAs
- Preferred Certifications: Security X, CySA+, GCSA, GCIH.
- Experience in an MDR or MSSP environment is highly desirable.
- The working hours for this role are from 11:30 PM to 7:30 AM IST.
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Let the agent run this one for you.
Tailored resume, auto-apply, and referral lookup — in under 2 minutes.
Section · 02
Skills
CyberIncident Responsecase managementEmail SecurityGCIHIncident InvestigationCrowdstrikeCustomer ManagementManaged Security ServicesCyber DefenseFinancial SecurityJira AtlassiancloudCyber SecurityEquityLinuxArtificial Intelligence
Section · Company
About Deepwatch
Deepwatch
IT Services & Consulting
Tampa
US
About
Deepwatch secures the digital economy by protecting enterprise networks via its cloud security platform. Deepwatch is securing the digital economy by tenaciously protecting enterprise networks - everywhere, every day. Deepwatch's team, many of the technically astute minds in cybersecurity, serves an impressive list of Global 2000 companies. Deepwatch’s cloud security platform backed by exceptional engineers, developers, and security experts is changing the modern SOC. Deepwatch is a CISO Choice Awards: MSSP Winner 2021, Great Place to Work® Certified 2021 and 2022, Forbes Top 50 Tech Company, Backed by premier investors with >$200 Million in growth capital from Goldman Sachs, Vista Equity Partners, and ABS Capital, Splunk Partner: #1 Volume MDR/MSSP and a Forrester: Top 10 MDR. Deepwatch's innovative cloud platform and borderless SOC extend its customers’ cybersecurity teams and proactively protect their brand, reputation, and digital assets. Its analytics platform analyzes billions of events each month and is trusted by hundreds of organizations to provide 24/7/365 managed security services. Deepwatch has developed an innovative IP in the industry and is expanding its platform by continuously investing in R&D.
Industries
Cloud SecurityCyber SecurityInformation Technology
Find them on