About the role
BePartOfAHigh-PerformingTeam
Joinaglobalfinancialservicestechnologyorganizationdedicatedtoprotectingcriticalbankingsystems,sensitiveinformation,andenterpriseinfrastructureagainstevolvingcyberthreats.Theorganizationoperatesinahighlyregulatedenvironmentwherecybersecurity,operationalresilience,andcontinuousimprovementareessentialtobusinesssuccess.
ThisopportunitysitswithinanestablishedSecurityOperationsCenter(SOC),workingalongsidecybersecurityspecialistsfocusedonthreatdetection,incidentresponse,digitalforensics,andproactivesecurityoperations.Theteamemphasizestechnicalinvestigation,collaboration,andinnovation,leveragingadvancedsecuritytechnologiestostrengthendefensesandimprovetheeffectivenessofenterprisesecuritymonitoring.
What'sInStoreForYou
* Remoteworkopportunitysupportingenterprisecybersecurityoperations.
* Engagement:W2only(noC2C/1099).
* WorkwithanexperiencedSOCteamresponsibleforprotectingacomplexfinancialservicesenvironment.
* Gainexposuretoadvancedsecuritymonitoring,threathunting,incidentresponse,andsecurityautomationtechnologies.
* Collaboratewithspecialistsacrossdetectionengineering,incidentresponse,andsecurityautomation.
* Contributetocontinuousimprovementsincybersecurityprocesses,detectioncapabilities,andoperationalefficiency.
HowYouWillMakeAnImpact
* Investigatecybersecurityalertsandsuspiciousactivitytodeterminepotentialthreats,assessseverity,identifyrootcauses,andcoordinateappropriateresponses.
* Performdetailedincidentinvestigations,includinganalyzingattackerbehavior,identifyingcompromisedassets,andreconstructingsecurityevents.
* Conductproactivethreathuntingacrossenterprisesystemstoidentifysuspiciousbehaviorthatmayhavebypassedexistingsecuritycontrols.
* ApplytheMITREATT&CKframeworkandcyberkillchainconceptstoanalyzeadversarytactics,techniques,andprocedures(TTPs).
* LeverageSIEM,EDR,NDR,XDR,andbehavioralanalyticstechnologiestoinvestigatethreatsandimprovedetectioneffectiveness.
* Partnerwithdetectionengineeringteamstoidentifymonitoringgaps,reducefalsepositives,andenhancesecurityalertingcapabilities.
* Collaboratewithsecurityautomationspecialiststostreamlinerepetitiveinvestigationandresponseactivities.
* Supportdigitalforensicinvestigationsandcontributetechnicalfindingsduringcybersecurityincidents.
* Develop,maintain,andimproveSOCinvestigationprocedures,incidentresponseplaybooks,andoperationaldocumentation.
* Evaluateemergingattacktechniquesandassesstheorganization'sabilitytodetectandrespondtothem.
* AnalyzesecurityactivityacrossWindows,Linux,ActiveDirectory,cloudenvironments,andenterprisenetworks.
* Contributetosecurityinitiativesthatimproveoperationalresilience,responseefficiency,andoverallcybersecuritymaturity.
Requirements
AreYouAnExperiencedSOCAndIncidentResponseProfessionalReadyToMakeAnImpact?
* 4+yearsofprofessionalcybersecurityexperience,preferablyinvolvinghands-onSOCoperations,incidentresponse,threathunting,ordigitalforensics.Candidateswith5–7yearsofrelevantexperienceareparticularlyalignedwiththerole.
* Demonstratedexperienceinvestigatingsecurityalerts,analyzingsuspiciousactivity,andrespondingtocybersecurityincidents.
* Strongunderstandingofenterprisesecuritymonitoringtechnologies,includingSIEM,EDR,NDR,XDR,andUEBA.
* WorkingknowledgeoftheMITREATT&CKframework,cyberkillchainmethodology,andcommonattackertechniques.
* ExperienceinvestigatingsecurityeventsinvolvingWindows,Linux,ActiveDirectory,andcloudtechnologies.
* Knowledgeofnetworksecurityconcepts,includingfirewalls,proxyservers,emailsecurity,andnetworktrafficanalysis.
* Abilitytodistinguishgenuinesecuritythreatsfromfalsepositivesandrecommendimprovementstodetectionlogic.
* Familiaritywiththreathuntingmethodologies,digitalforensics,andincidentresponseprocedures.
* Stronganalyticalandtroubleshootingskillswiththeabilitytoinvestigatecomplextechnicalissuesindependently.
* Excellentwrittenandverbalcommunicationskills,particularlywhendocumentinginvestigationsandcommunicatingtechnicalfindings.
* Abilitytoprioritizecompetingincidentsandresponsibilitiesinafast-pacedsecurityoperationsenvironment.
* Self-motivated,detail-oriented,andcommittedtocontinuouslearningandcybersecurityimprovement.
* ProfessionalcertificationssuchasGCIH,GNFA,GCFA,CEH,OSCP,CISSP,orcomparablecredentialsareadvantageousbutnotrequired.
Originally posted on Himalayas