Threat Response
Company:
Applied Systems
Location:
Bengaluru, Karnataka, India
Job Description
Job Title Threat Response Analyst
Job & Department Summary
Applied Systems, Inc., a worldwide leader in insurance technology, is currently searching for a
Threat Response Analyst to join our Corporate IT team. Enjoy working in a fast paced, high
energy, growing environment, working highly collaboratively and driving business results? Then
we are looking for you!
Required Skills & Experience
Job Title Threat Response Analyst
Job & Department Summary
Applied Systems, Inc., a worldwide leader in insurance technology, is currently searching for a
Threat Response Analyst to join our Corporate IT team. Enjoy working in a fast paced, high
energy, growing environment, working highly collaboratively and driving business results? Then
we are looking for you!
Required Skills & Experience
- Educational Requirement: BE, BTech
- 5-6 years of Experience
- At least 3 years of experience conducting threat response activities.
- Demonstrable knowledge of security event analysis leveraging SIEM tools.
- Experience with endpoint detection and response solutions
- Working knowledge of information security incident investigation and response skillset.
- Working knowledge of security log parsing and analysis skill set.
- Working knowledge of networking fundamentals (TCP/IP, DNS, SMTP/Email, network layers, Ethernet, ARP, etc.).
- Utilize a logging platform (SIEM) for security analytics and identification of tactics, techniques, and patterns of attackers.
- Contribute to the creation of threat and incident response runbooks.
- Contribute to the production and tuning of event and threat detection rules.
- Automate detection, analysis, and response action using SOAR and platform integrations
- Participate in the Security Incident Response Team on-call rotation.
- Collect and analyze threat intelligence reports covering new threats, vulnerabilities, products, and research.
- Assist with the development of project plans and process documentation.
- Author threat intelligence reports driven by our security operations team's own incidents, analysis, and adversary engagements.
- Analyze event feeds and collected malware over the long term to trend and correlate.
- Triages and handles/escalates security events and issues.