T&T | Cyber: D&R | Consultant | SOC - SIEM - Incident Response & Handling | Mumbai, Hyderabad

About the role

Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Fundamental understanding of network traffic analysis including TCP/IP, routing, switching, protocols, etc. Reviews the most recent SIEM alerts to see their relevance and urgency. Carries out triage to ensure that a genuine security incident is occurring.

What you'll do

• EDR/XDR solutions (CrowdStrike, Cortex XDR, Microsoft Defender)
• Review and triage information security alerts worked by L1, provide analysis, determine and track remediation, and escalate as appropriate
• Knowledge on XDR can be an added advantage
• Reviews the most recent SIEM alerts to see their relevance and urgency. Carries out triage to ensure that a genuine security incident is occurring. Oversees and…
• Inform L4 team of proactive and reactive actions to minimize false positives

What you need

• 2–5 yrs of experience
• SIEM
• Incident response
• EDR
• Splunk
• CEH
• Risk management
• B.Tech or B.E. or B.Sc or BCA or M.Tech or MCA or M.Sc

Good to have

• TCP/IP
• Routing and switching