Senior Engineer

Job Description

Role Overview:You will be responsible for handling day-to-day operations to monitor, identify, triage, and investigate security events from various Endpoint (EDR), Network, and Cloud security tools. You will detect anomalies, report remediation actions, and respond to security incidents. Additionally, you will coordinate with cross-functional teams to mitigate and eradicate threats. Your role will involve investigating and identifying root cause findings, communicating findings to stakeholders, and working with key stakeholders to implement remediation plans. You will also be authoring Standard Operating Procedures (SOPs) and training documentation when needed. Generating end-of-shift reports for documentation and knowledge transfer to subsequent analysts on duty will be part of your responsibilities. You should be prepared to work in a 24/7 environment, including night shifts, based on business requirements. Conducting malware analysis, host and network forensics, log analysis, and triage in support of incident response will also fall under your purview. Utilizing state-of-the-art technologies such as host forensics tools, Endpoint Detection & Response tools, log analysis, and network forensics to perform investigative activities will be integral to your role. Recognizing attacker and APT activity, developing security content, scripts, tools, or methods to enhance incident investigation processes are also key responsibilities.Key Responsibilities:- Handle day-to-day operations to monitor, identify, triage, and investigate security events- Detect anomalies, report remediation actions, and respond to security incidents- Coordinate cross-functional teams to mitigate and eradicate threats- Investigate and identify root cause findings and communicate them to stakeholders- Implement remediation plans in response to incidents- Author Standard Operating Procedures (SOPs) and training documentation- Generate end-of-shift reports for documentation and knowledge transfer- Work in a 24/7 environment, including night shifts- Conduct malware analysis, host and network forensics, log analysis, and triage- Utilize state-of-the-art technologies for investigative activities- Recognize attacker and APT activity, develop security content, scripts, tools, or methodsQualification Required:- Bachelors degree relevant to Information Technology, Computer Science/Engineering (or equivalent)- Advanced certification desirable in GCIH, GCIA, GCFE, GREM, GCFA, GSEC- Minimum 5-10 years of experience in an Incident Responder/Handler role- Strong experience in SIEM processes and Products (e.g., ArcSight, Microsoft Sentinel etc.)- Full understanding of Tier 1 responsibilities/duties and how they feed into Tier 2- Advanced knowledge of TCP/IP protocols, Windows, Linux operating systems, IDS, SIEM technologies- Experience with Splunk or Sentinel- Knowledge of threat hunting, packet and log analysis, forensic and malware analysis, cyber threat intelligence gathering and analysis(Note: The additional details of the company are not provided in the job description) Role Overview:You will be responsible for handling day-to-day operations to monitor, identify, triage, and investigate security events from various Endpoint (EDR), Network, and Cloud security tools. You will detect anomalies, report remediation actions, and respond to security incidents. Additionally, you will coordinate with cross-functional teams to mitigate and eradicate threats. Your role will involve investigating and identifying root cause findings, communicating findings to stakeholders, and working with key stakeholders to implement remediation plans. You will also be authoring Standard Operating Procedures (SOPs) and training documentation when needed. Generating end-of-shift reports for documentation and knowledge transfer to subsequent analysts on duty will be part of your responsibilities. You should be prepared to work in a 24/7 environment, including night shifts, based on business requirements. Conducting malware analysis, host and network forensics, log analysis, and triage in support of incident response will also fall under your purview. Utilizing state-of-the-art technologies such as host forensics tools, Endpoint Detection & Response tools, log analysis, and network forensics to perform investigative activities will be integral to your role. Recognizing attacker and APT activity, developing security content, scripts, tools, or methods to enhance incident investigation processes are also key responsibilities.Key Responsibilities:- Handle day-to-day operations to monitor, identify, triage, and investigate security events- Detect anomalies, report remediation actions, and respond to security incidents- Coordinate cross-functional teams to mitigate and eradicate threats- Investigate and identify root cause findings and communicate them to stakeholders- Implement remediation plans in response to incidents- Author Standard Operating Pr

Keyskills :
Malware AnalysisLog AnalysisEndpoint DetectionResponse toolsForensicsIncident ResponseSecurity IncidentEvent MonitoringTCPIP protocolsWindows Operating SystemsLinux Operating SystemsIntrusion Detection SystemsSIEM technologiesThreat Hunting