Cybersecurity Analyst - SOC - Noida, UP
- Optum
- Not Specified
- Noida, Gurugram
- 3 years ago
- Email to a friend
- Report this job
Job Description
Combine two of the fastest-growing fields on the planet with a culture of performance, collaboration and opportunity and this is what you get. Leading edge technology in an industry that's improving the lives of millions. Here, innovation isn't about another gadget, it's about making health care data available wherever and whenever people need it, safely and reliably. There's no room for error. Join us and start doing your life's best work.(sm)
Primary Responsibilities:
- Perform incident response, with a primary focus of eliminating the threat to the network and determining the cause of the security incident while preserving evidence for further analysis
- Ensure incidents are handed in a manner that is consistent with established playbooks
- Monitors SIEM and logging for alerts of potential network threats, intrusions, and/or compromises
- Responsible for understanding the global threat environment and general security best practices
- Assists with triage of service requests from automated sensors and internal requests for assistance
- Participates in active cyber hunting to identify and eliminate known and unknown network threats
- Interface with technical personnel from various disciplines to rapidly resolve critical issues
- Appropriately inform and advise leadership of incidents and propose effective response and/or countermeasures for containment
- Participate in knowledge sharing with other security engineers and partner
- Identify, document, and recommend new or revised incident response playbooks
- Drive continuous improvement of processes and procedures to improve analysis, detection, and mitigation of incidents in support of the overall Cyber Defense mission
- Create and drive action plans to address recurring or ongoing information security incidents.
- Develop and maintain reporting metrics used to measure team performance, ensure analyst adherence to processes/procedures for operational consistency, identify process improvements, coaching, training, and professional development of the staff
- Participate in the planning and implementation of information security technology projects. Serve as point-person and subject matter expert for issues and projects related Cyber Security Counter Threat Operations
- Ability to work either in-office or remotely with minimal supervision, prioritize intake via multiple method that include SIEM's, email, chat, text messages and telephone calls.
- Collaboration as appropriate with leadership and other key stakeholders
- Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so
Required Qualifications:
- Knowledge of industry recognized analysis frameworks (Kill Chain, Diamond Model, MITRE ATT&CK, NIST Incident Response, etc.)
- Scripting experience with any of the following: C+, Python, PowerShell, Bash, or Java
- Knowledge of Cloud Computing Fundamentals
- Thorough understanding of fundamental security and network concepts (Operating systems, intrusion/detection, TCP/IP, ports, etc.)
- Willing to work in a team-oriented 24/7 SOC environment flexibility to work on a rotating schedule (including occasional shift work)
Preferred Qualifications:
- BS in Computer Science, Computer Engineering, Cyber Security, Forensics and/or equivalent work experience
- Experience with network monitoring in a SOC environment
- Experience in various cloud security solution Guard Duty, Sentinel, Prisma and Security Command Center
- Experience and knowledge conducting cyber threat analysis originating from phishing emails
- Previous experience working with network tools and technologies such as firewall (FW), proxies, IPS/IDS devices, full packet capture (FPC), and email platforms
- Security certifications (e.g. Security+, CCNA Cyber Ops, GCIA, GCIH, CEH, CySA+, OSCP, etc.)
- Efficient triage and documentation during incident response to effectively brief teammates, shift lead and supervisory levels
Employement Category:
Employement Type: Full timeIndustry: Hotels
Functional Area: IT
Role Category: Security Analyst
Role/Responsibilies: Cybersecurity Analyst - SOC - Noida, UP
Contact Details:
Company: OptumLocation(s): Noida, Gurugram
+ View Contact
Fraud Alert to job seekers!
₹ Not Specified
Optum
About: OptumInsight India Pvt Ltd, a UnitedHealth group company is a leading health services and innovation company dedicated to help make the health system work better for everyone. With more than 115,000 people worldwide, Optum combines technology, data and expertise to improve the delivery, ...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in