Roles and Responsibilities :

- Monitor and analyze security event logs from SIEM tools such as Splunk to identify potential threats and anomalies.
- Conduct thorough investigations into detected incidents, including gathering evidence, interviewing witnesses, and developing reports on findings.
- Collaborate with other teams to develop incident response plans and procedures for handling sensitive data breaches or system failures.
- Stay up-to-date with industry trends and best practices in cybersecurity to improve detection capabilities.

Job Requirements :
- Endpoint Security Solutions: Familiarity with platforms such as SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Sophos, or Trend Micro Vision One.
- Email Security Technologies: Exposure to solutions including Mimecast, Proofpoint, and Exchange Online Protection (EOP).
- Identity & Access Management (IAM): Basic understanding of Microsoft Entra ID (Azure AD), Multi-Factor Authentication (MFA), Conditional Access Policies, and identity security concepts.




- SIEM & SOAR Platforms: Knowledge of security monitoring and automation tools such as Microsoft Sentinel, USM Anywhere, Securonix or similar security operations platforms.
- Incident Response & Threat Frameworks: Familiarity with cybersecurity frameworks and methodologies, including NIST Incident Response (NIST IR) and the MITRE ATT&CK; framework.
- Security Monitoring & Analysis: Understanding of security alerts, threat detection, event investigation, and incident triage processes.
- Cybersecurity Best Practices: Awareness of industry standards and frameworks such as NIST, ISO 27001, and the Essential Eight.
- 1-3 years of experience in a similar role within the financial services industry.
- Robust understanding of EDR (Endpoint Detection & Response) solutions like Sentinel.
- Proficiency in analyzing log data using various tools like Splunk.

📌 Cyber Security Operations Analyst (Navi Mumbai)
🏢 Brennan It
📍 Navi Mumbai