1

Robust hands-on experience with SIEM platforms, log analysis, event correlation, alert investigation, and incident validation.

2

Experience in threat hunting, detection engineering, use-case development, and threat intelligence-driven security monitoring.

3

Strong understanding of MITRE ATT&CK; Framework, cyber-attack techniques, IOCs, IOAs, and adversary TTPs.

4

Experience in incident triage, investigation, root cause analysis, containment, remediation, and post-incident review.

5

Hands-on knowledge of SOAR platforms, workflow automation, incident response playbooks, and security orchestration.

6

Good understanding of endpoint, network, identity, cloud, email, and application security monitoring, including SIEM/XDR tuning and optimization.

7

Strong analytical, documentation, reporting, stakeholder management, and problem-solving skills, with knowledge of industry security frameworks such as NIST, CIS, and ISO 27001.

📌 Assistant Manager - Cyber Security Operations (Mumbai)
🏢 Larsen u0026amp; Toubro
📍 Mumbai