Senior Information Security Analyst (Security Operations/Incident Management)

What does the team do?

Opportunity is part of the evolving cyber security group which is laser-focused on setting up industry benchmarks in managing & guarding against digital risks in a “Cloud Native- DevOps Only” environment. It is a lean-mean-special action group where every cyber sentinel gets an opportunity to work across domains, has the independence to challenge the status quo & evolve cyber practices to the next level of maturity. Our core competencies revolve around “Product & Platform security”, “Cloud Native Risk Management” and “Detection & Response”.

What you will be doing?

• Alert triage - Investigate EDR, Azure AD, Email & SIEM alerts to identify threats & anomalies
• Perform detailed technical investigation on security incidents, root cause analysis, recommend and mitigate the cyber incident as per security framework
• Create Incident Response process/run books/SOPs, ensure continuous documentation and reporting
• Provide security advisory, develop use cases, support in deployment/integration, and fine-tune security platforms with Corporate IT team
• Collaborate with Corporate IT teams to strengthen InMobi's security posture & reduce attack surface
• Utilize open-source threat intelligence to evaluate threats and analyze their impact in the InMobi Environment, deploy necessary detection/remediation procedures
• Collaborate with other Tech and Non-tech teams to achieve the cybersecurity objectives of InMobi
• Coordinate with stakeholders to understand about the Infra, products, and business process to ensure the adequate security controls are in place

What is expected of you?

• 3-6 years of experience in Security Operations/Incident Management is required
• Strong skills in correlating events, log analysis, networking basics & security fundamentals
• Good knowledge in SOC frameworks - MITRE ATT&CK, NIST, cyber kill chain
• Good understanding of multiple security tools like EDR, email security, IPS/IDS, Firewall & SIEM
• Hands-on experience in any one or more Security tools like McAfee EDR, Fireye, CrowdStrike, PaloAlto Cortex XDR & Microsoft XDR
• Exposure to Cloud Security technologies is desirable
• Strong ability to operate, decide & evolve in ambiguous situations
• Strong interpersonal skills, good team player, excellent written and verbal communication skills
• Demonstrated good customer service, curiosity to learn & adopt
• GIAC / CEH / CySA+ or equivalent certified professional is preferred
• Self-motivated, Self-Governing individual with a penchant for Cybersecurity and a sharp eye for details