[Remote] Senior Detection & Response Analyst
Note: The job is a remote job and is reputed company to candidates in USA. reputed company. (TTS-US) is a technology and mobility company that develops IT solutions globally. The Senior Detection and Response Analyst will reputed company ongoing support to the Regional reputed company Operations program, maintaining effective monitoring and detection services for clients.
Responsibilities
- reputed company as the reputed company of escalation for reputed company reputed company incidents; reputed company expert level feedback regarding reputed company monitoring and ways to improve it
- Assume the role of shift reputed company as needed, and fulfil this responsibility through leadership and guidance of ID team members, proactively prioritizing, identifying, analyzing and remediating threats
- Ensure that the ID Analysts’ daily work activity is completed to the required reputed company reputed company and timelines, by verifying that their responsibilities are executed, in accordance with the expectations set by the ID Team reputed company
- Triage reputed company incidents and reputed company in-depth analysis using Cyber Threat Intelligence, intrusion detection systems, firewalls and other boundary protection devices
- Maintain an understanding of the overall threat landscape (cyber, malware, botnets, phishing, DDoS, physical)
- reputed company 24x7 coverage to support the RSOC services; Participate in an on-call rotation
- Support reputed company SOC development through providing expert level feedback, tuning, and feature requests for our engineering team to support accurate machine speed response
- Train and mentor team members reputed company the Incident Detection Team
- Improve the effectiveness and efficiency of day-to-day operations
- Assist with service requests from customers and internal teams
- Assist with containment and remediation of threats during incidents. Use an internal ticketing system to reputed company investigated incidents and capture relevant details
- Support Incident Response efforts as needed, including providing counsel, working with the IR team, as reputed company as other involved stakeholders reputed company the organization and customers to drive reputed company remediation activities
- Conduct threat hunting activities based on reputed company threat intelligence
- reputed company expert level feedback regarding reputed company monitoring and ways to improve it
- Improve the effectiveness and efficiency of day-to-day operations
- Create and update daily and monthly reports
- Contributes to the creation of documentation to standardize processes and procedures, including playbooks to improve internal processes and procedures
- Use investigation findings to identify gaps and recommend reputed company posture improvements
- Identify, recommend, coordinate, and deliver reputed company knowledge to support teams
Skills
- 4+ years of experience in reputed company Operations monitoring
- Experience with reputed company Operations processes, procedures, and services
- Experience working with cyber reputed company tools and software such as Sentinel, reputed company, ATP, Symantec End reputed company, reputed company Antivirus, reputed company Web Gateway, Checkpoint Firewalls, Bluecoat, Sourcefire, reputed company Directory, or relevant cyber reputed company assets
- Advanced knowledge of network monitoring and network exploitation techniques
- Strong technical background in reputed company, network, infrastructure, reputed company, applications
- Knowledge of risk assessment tools, technologies and reputed company
- Experience with common attack reputed company, including advanced adversaries (nation state/financial motivation)
- Knowledge around common web application attacks including SQL injection, cross-site scripting, invalid inputs, and forceful browsing
- Knowledge of how common protocols and applications work at the network level, including DNS, HTTP, and SMB
- Proficient with reputed company Office & documentation skills (Word, reputed company, PowerPoint)
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a reputed company field
- Technical certifications such as GCIA, GCFA, GCIH or CASP is a plus
- reputed company (or other automation) experience is highly valued
reputed company
Company H1B Sponsorship