Incident Response And Governance
Year Navi Mumbai, Maharashtra, India
Job Description
b'
: Security Operations Centre \xe2\x80\x93 Incident Response and Governance Specialist
Reporting Structure
Reports to Lead \xe2\x80\x93 Security Operations Centre
Location \xe2\x80\x93 Mumbai
Education
- Bachelor\'s degree in Cybersecurity, Information Technology, or a related field (preferred).
Experience/ Qualifications
- 4-10 years of working experience in a security operations center or relevant.
- Experience with incident response frameworks and methodologies (e.g., MITRE ATT&CK)
- Strong knowledge of incident response, incident management, change management, process flow, etc. and their best practices.
- Excellent communication and collaboration skills
- Ability to work independently and as part of a team
- Ability to handle pressure and work effectively in a fast-paced environment
- Experience with security tools and technologies (e.g., SIEM, SOAR, EDR) a plus
- Knowledge of legal and regulatory requirements related to data breaches a plus
- Good understanding of Incident life cycle and Triage process.
- Good experience in OS logs, WAF, IPS, firewall etc. log analysis.
- Insight knowledge about DFIR and Malware analysis
- Knowledge of Threat Intelligence and Security Advisories research and analysis would be added advantage.
Industry
- Financial Domain (Banking / NBFC experience is desirable)
Responsibilities
Incident Detection and Triage:
- Monitor security systems and SIEM for potential security incidents
- Analise alerts and events to determine their severity and potential impact
- Prioritize incidents based on risk and potential business impact
- Document and escalate incidents as needed
- Contain incidents to prevent further damage or data loss
- Collect and analyze evidence to determine the root cause of the incident
- Develop and implement remediation plans to address the incident
- Eradicate the threat and prevent future occurrences
- Document the incident response process for future reference
- Communicate effectively with internal stakeholders, including system administrators, IT operations, and business units
- Collaborate with external vendors and law enforcement as needed
- Prepare and deliver incident reports and updates to senior management
- Stay up-to-date on the latest cyber threats and vulnerabilities
- Share threat intelligence with other security professionals within the organization
- Contribute to the development and improvement of the organization\'s security posture
Industry Certifications
- Technical certifications: CompTIA security+ \\ CEH or relevant
- Security Standard frameworks: ISO/NIST/PCI-DSS
- Incident Handling and relevant certification
Beware of fraud agents! do not pay money to get a job
MNCJobsIndia.com will not be responsible for any payment made to a third-party. All Terms of Use are applicable.
Related Jobs
Job Detail
-
Job IdJD3332359
-
IndustryNot mentioned
-
Total Positions1
-
Job Type:Full Time
-
Salary:Not mentioned
-
Employment StatusPermanent
-
Job LocationNavi Mumbai, Maharashtra, India
-
EducationNot mentioned
-
ExperienceYear