Security Analyst - CERT Team

KEY EXPECTED ACHIEVEMENTS

1. Security Incident Handling:

- Analyze and confirm the severity of security incidents based on available data.
- Follow documented incident response procedures to resolve threats efficiently.
- Collaborate with technical experts to develop and implement remediation plans.
- Track and monitor corrective actions, ensuring stakeholders are informed and engaged.
- Write detailed incident reports, including 'hot' and 'cold' feedback, for major incidents.
- Participate in crisis management, including artifact collection, risk analysis, and first-level threat assessments.

2. Projects, Continuous Improvement, and Expertise Sharing:

- Stay updated on the latest incident response techniques through training and daily monitoring.
- Provide technical expertise for projects, including tool evaluations, risk analysis assistance, and technical audits.
- Propose and develop new detection scenarios, automation tools, or enhancements to improve productivity.
- Conduct team knowledge-sharing sessions by presenting in-depth technical topics.
- Contribute to the broader expertise missions within the team based on skillsets.

Experience Requirements:

- 10-12 years of relevant experience in cyber security, with a focus on security incident handling, detection, and analysis.

Qualifications and Skills:

Technical Skills:





- Data Analysis & SIEM Tools:
- Proficient in SPL (Search Processing Language) for data analysis, threat hunting, and creating dashboards.
- Strong experience with SIEM tools like Splunk (Preferred), Q Radar or Sentinel.
- Endpoint Protection (EPP) & Endpoint Detection and Response (EDR):
- Hands-on experience with tools such as:
- Trend Micro Deep Security
- Microsoft Defender
- Palo Alto Cortex
- Tehtris eGambit
- Network Security & Firewalls:
- Knowledge of firewalls, IDS/IPS, VPNs, and network devices such as:
- Cisco
- Palo Alto Global Protect
- Proficiency in analyzing firewall logs and interpreting PCAPs using tools like Wireshark.
- Operating Systems & Scripting:
- In-depth understanding of Windows and Linux log analysis.
- Knowledge of PowerShell scripting and other system scripting languages.
- Investigative Skills:
- Ability to autonomously investigate alerts from detection to resolution.

Behavioral Competencies:

- Robust analytical and problem-solving skills.
- Ability to work independently while collaborating with a global team.
- Excellent communication and report-writing skills.
- Passion for continuous learning and knowledge sharing.
- Flexibility to work in a fast-paced environment and support on-call rotations.

📌 Security Analyst - CERT Team (Pune)
🏢 Michelin
📍 Pune