Threat Analyst- Team Lead
- Sophos
- 5 - 8 years
- Bengaluru
- 9 months ago
- Email to a friend
- Report this job
Job Description
- Maintain supervision over operational tasks and provide day-to-day oversight for threat analysts
- Oversee analysts in their investigation and response
- Activities when security incidents arise to determine possible root cause and resolution
- Effectively communicate information to stakeholders of all levels
- Demonstrate experience in network and host-based intrusion analysis, incident response processes and procedures, digital forensics and/or handling malware
- Acting as a lead throughout incident scenarios and provide subject matter expertise in cybersecurity incident response
- Successfully executing incident handling procedures as well as direct response to cyber security incidents
- Maintaining current knowledge and recognition of attacker tools, tactics, and procedures to produce indicators of compromise (IOCs) that can be utilized during active and future investigations
- Assessing cyber threat intelligence/open source intelligence and operationalizing that information
- Demonstrating real-world, hands-on experience dealing with sophisticated malware and dynamic cyber threat actors
- Identifying current and emerging threats and application of such research
What you will bring
- 5+ years of experience within a cybersecurity environment; experience in a leadership role is preferred
- Bachelors in information technology, Computer Science, or a related field; or relevant, commensurate work experience
- Experience in a security operations center, or similar environment, and identifying indications of compromise or attack and responding to incidents
- Endpoint and network security experience required; IDS, IPS, EDR, ATP, Malware defenses and monitoring experience
- Threat hunting experience preferred
- Knowledge of common adversary tactics and techniques, e.g., obfuscation, persistence, defense evasion, etc.
- Knowledge of Mitre ATTCK framework preferred
- Working knowledge of incident response procedures
- Experience with SQL query construction preferred
- Experience with OSQuery is a plus
- Experience administering and supporting Windows OS (both workstations and server) and one of the following: Apple or Linux-based operating systems (e.g. XP, Windows 7, 2003, 2008, OS X)
- Fundamental understanding of network traffic analysis including TCP/IP, routing, switching, protocols, etc.
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: Engineering - Software & QARole Category: Software DevelopmentRole: Technical LeadEmployement Type: Full timeContact Details:
Company: SophosLocation(s): Bengaluru
Keyskills: Computer science Windows OS Linux Network security Open source Information technology IPS Monitoring SQL Recruitment
Similar positions
Sophos
Powered by SophosLabs a global threat intelligence and data science team Sophoscloud-native and AI-enhanced solutions secure endpoints (laptops, servers and mobile devices) and networks against evolving cybercriminal tactics and techniques, including automated and active-adversary breaches, ransomwa...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in