This role is responsible for daily and real-time monitoring of cyber security tooling and settings and the provision of Level I and II cyber security incident management to include:
Detection and Analysis
Containment, Eradication
Recovery
Reporting
Remediation (Triage, Incident Handling and Threat Hunting)
In addition to monitoring and incident management, the position is responsible for providing cyber security subject matter expertise, service management, and hands on administration of advanced cyber security tooling as assigned. Specific service management and administration assignments will vary by individual and may include services such as System Information & Event and Management (SIEM), Vulnerability and Patch Management, Data Leakage Protection, User Rights Management, Conditional Access or CASB, Application Whitelisting, Firewall management, and Anti-Malware. The position also supports road mapping, projects and risk assessments, policy management, reporting, and cross-training. The role will require working within the Security Operations Centre (SOC)



and requires flexibility across all times zones as it involves engagement with colleagues from all locations of the global business.
Monitor cyber information, events, alerts, and ticketing queues to identify security events and threats across multiple technologies to ensure security incidents are identified timely
Proactively research and maintain a proficiency in current and emerging threats, vulnerabilities and security technology developments
Evaluate and utilize intelligence for current threats and vulnerabilities to ensure protective monitoring is capable of detecting potential current attacks
Provide assurance of security posture through monitoring security system status
Respond to tickets and incidents as assigned
Support the incident and problem response process through to closure
Act as Level II SME escalation; work with internal and external individuals in preparation and when

📌 Cyber Security Analyst Pune
🏢 Smiths Detection
📍 Pune