Senior Soc Analyst

Role- Senior SOC Analyst
Primary Skills: Security (advanced), Web Attack (advanced), Mac/Linux (intermediate), Threat Analysis (advanced), Incident Response (advanced)
Employment Type: Contract (extendable long term role)
Duration: 12+ Months (With Possible Extension & Conversion)
Experience- 3+ yrs
Location: Bangalore- (Onsite)

Job Summary:
This role involves swiftly identifying and mitigating cyber threats within a large-scale e-commerce environment. You will investigate security incidents, develop countermeasures against attacks, and contribute to the continuous improvement of security defenses.

Key Responsibilities:

• Investigate and analyze security incidents to determine their scope and impact.
• Develop and implement automated solutions for threat detection and response.
• Conduct in-depth research on emerging threats and vulnerabilities.
• Perform digital forensic analysis to support investigations.
• Communicate incident status and findings to stakeholders

Must-Have Skills:

• Proven experience in incident detection and response.
• Proficiency in analyzing security log data..

Industry Experience:
Experience in the e-commerce or technology sector is beneficial.

Core Job Functions Include:
Investigations- Investigating computer and information security incidents to determine extent of compromise to information and automated information systems

• Escalations - Responding to escalated events from security tooling to develop/execute security controls, Defense/countermeasures to prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and web-based systems.
  
• Research -Researching attempted or successful efforts to compromise systems security and designs countermeasures.
  
• Education - maintaining proficiency in tools, techniques, countermeasures, and trends in computer network vulnerabilities, data hiding and network security and encryption.
  
• Communications -Provides information and updates to shift leads & leadership, creates pass-downs for next shift, work closely with supporting teams, provide feedback for new security policy and standards, engage with other teams and adjacencies through email and conference calls.
  
• Digital Forensics- As it relates to information systems, performs HR investigations and legal holds in a forensically sound manner. Consults with HR and legal subject matter experts to adhere to local country law
  
• Coverage- Must be willing to perform shift work, weekends, and holidays as well as participate in a rotating shift consisting of four (4) 10 hour shifts with four days on, three (3) days off and possible rotations across Day, Swing, and Graveyard shifts as needed.
  
• To be successful in this position, you should be proficient with:
  
• Incident Response- Getting people to do the right thing in the middle of an investigation.
  Offensive Techniques Penetration testing, IOCs, and exploits at all layers of the stack.
  Logs - you should be comfortable with a SEIM to be able to gather and analyze logs to recreate incidents and hunt for threats.
  
• System Forensics Basic understanding of image acquisition techniques, memory forensics, and the like.
  
• Networking Fundamentals - TCP/IP Protocols (HTTP, DNS, FTP, DHCP, ARP, etc.), and Wireshark/TCPDump.
  
• Scripting Should be familiar with scripting in at least one of the following: python, perl or a similar language.
  
• Risk Analysis Taking a vulnerability in a particular environment and understanding the practical associated risk.
• Qualifications:
• Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field.
• Minimum three (3) years of professional experience in incident detection and response, malware analysis, or digital forensics.
• Must have at least one certification.