Listing Description
What does the team do?
Opportunity is part of the evolving cyber security group which is laser-focused on setting up industry benchmarks in managing & guarding against digital risks in a “Cloud Native- DevOps Only” environment. It is a lean-mean-special action group where every cyber sentinel gets an opportunity to work across domains, has the independence to challenge the status quo & evolve cyber practices to the next level of maturity. Our core competencies revolve around “Product & Platform security”, “Cloud Native Risk Management” and “Detection & Response”.
What you will be doing?
- Alert triage - Investigate EDR, Azure AD, Email & SIEM alerts to identify threats & anomalies
- Perform detailed technical investigation on security incidents, root cause analysis, recommend and mitigate the cyber incident as per security framework
- Create Incident Response process/run books/SOPs, ensure continuous documentation and reporting
- Provide security advisory, develop use cases, support in deployment/integration, and fine-tune security platforms with Corporate IT team
- Collaborate with Corporate IT teams to strengthen InMobi's security posture & reduce attack surface
- Utilize open-source threat intelligence to evaluate threats and analyze their impact in the InMobi Environment, deploy necessary detection/remediation procedures
- Collaborate with other Tech and Non-tech teams to achieve the cybersecurity objectives of InMobi
- Coordinate with stakeholders to understand about the Infra, products, and business process to ensure the adequate security controls are in place
What is expected of you?
- 3-6 years of experience in Security Operations/Incident Management is required
- Strong skills in correlating events, log analysis, networking basics & security fundamentals
- Good knowledge in SOC frameworks - MITRE ATT&CK, NIST, cyber kill chain
- Good understanding of multiple security tools like EDR, email security, IPS/IDS, Firewall & SIEM
- Hands-on experience in any one or more Security tools like McAfee EDR, Fireye, CrowdStrike, PaloAlto Cortex XDR & Microsoft XDR
- Exposure to Cloud Security technologies is desirable
- Strong ability to operate, decide & evolve in ambiguous situations
- Strong interpersonal skills, good team player, excellent written and verbal communication skills
- Demonstrated good customer service, curiosity to learn & adopt
- GIAC / CEH / CySA+ or equivalent certified professional is preferred
- Self-motivated, Self-Governing individual with a penchant for Cybersecurity and a sharp eye for details
Listing Details
- Citizenship: Not Provided
- Incentives: Not Provided
- Education: Not Provided
- Travel: Not Provided
- Telework: Not Provided