Job Description
We are excited to announce an opening for Analyst at AM GCC.
Please find below the details of the role and its responsibilities.
Skills Required:
Trellix, MS Defender, Microsoft Defender, Windows, AD, Active Directory, Linux
Administration, Security Monitoring, Forensics, Incident Response
Experience Range:
2 - 4 years
Job Description:
Position Summary:
Responsibilities:
Security monitoring:
• Perform investigation of common cyber security incidents
• Participate in handling cyber security incidents investigation and analysis
• Maintain security systems to monitor active IOCs
• Support team and local units in executing after-incident recommendations
Security tools management:
• Maintain security tools like EDR, NDR, SIEM, Vulnerability management
• Maintain security tools by applying exceptions configuration for IT applications
• Support team and local units with security tools configuration and troubleshooting
• Ensure that security monitoring tools are working properly
• Support team in deployment of necessary security tools in the infrastructure
• Contribute to the development of operating capabilities of the team members
• Interpret results of vulnerability scans in context of ongoing security incidents
INTERNAL & EXTERNAL WORK RELATIONSHIPS:
• With Cyber Defense Center to manage daily operations, share expertise and
contribute to technical evaluations of security solutions
• With Segment Security Officers to ensure proper service delivery, escalate issues and
incidents when required and provide recommendations to improve security flaws
discovered in their business area
• With IT/OT Infrastructure teams to provide technical support for IT security solutions,
explain and help to execute remediation steps for vulnerabilities and encountered
threats
Required Skill:
• Proactive, innovative, logical, curious, and bold. Willing to understand, challenge and
support our business needs?
• A good knowledge of Windows/AD Administration
Essential understanding of at least 2 of below knowledge domains:
• Linux Administration
• Networking
• Security Monitoring
• Vulnerability management
• Forensics & Incident Response
• Good knowledge and strong interest in IT Security (best-practices, standards,
technology)
• A proven experience of working with security tools like AV, EDR, SIEM, NDR
• Experience with security incidents handling as advantage
• Quick learner with strong time management skills
• Able to work in multi stakeholder environment
• Strong troubleshooting skills and good attention to details
Preferred Skill:
• Ability to analyze and prioritize issues, identify root causes, handle pressure and
implement solutions
• Understanding of Windows/AD security mechanisms
• Experience in AV/EDR, SIEM operations in 10k+ environment
• Good experience in operating IT Security tools in large organizations
Qualification and Experience:
• BE / BTech / Any Master's Degree