SOC Analyst Senior Cyber Security Engineer Job at Sopra Steria (Noida)

Senior Detection Engineer

This is a detection engineering role that leverages knowledge of monitoring, ana...

Location

Singapore , Singapore

Salary:

Not provided

Marriott Bonvoy

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification
3+ years of collective experience in Splunk SIEM (Splunk Enterprise Security) threat detection use case development or UEBA (Exabeam) use case development for insider threat use case development
5+ years of experience in security functions such as SOC, CIRT, security engineering, risk management, vulnerability management or technical infrastructure operations, administration, or systems engineering
scripting or programming language, including Python
Current information security certification such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) preferred
offensive and defensive security certifications such as CEH, IGAC Cyber Defense, OSCP or other related certifications preferred
Splunk Certification, including Splunk Enterprise Security Certified Admin preferred
use case development experience on the Exabeam platform preferred
working knowledge of the NIST Cyber Security Framework and ISO/IEC 27001:2022 preferred
working knowledge of the MITRE ATT&CK Framework preferred

Job Responsibility

Lead collaboration sessions within the cyber security tower and other business units to devise security monitoring use cases
engage and collaborate with other security engineers and architects as needed to keep pace with the evolution of corporate infrastructure and applications and share that knowledge with peers as appropriate
document prospective security monitoring use cases with MITRE ATT&ACK mappings using standard templates and methodologies
inform and consult other cyber ops teams of required data onboarding and integrations for use case development
develop analytics, correlation searches, dashboards, reports and alerts within the SIEM and UEBA platforms
solicit feedback for pre-production security monitoring content through peer review process and user acceptance testing for tuning
document developed security monitoring content in a documentation registry using department standard templates and methodologies
manage field mapping and transmission of security monitoring alerts to the security incident response platform for SOC analyst consumption as outlined in process documentation
provide governance support for the content development function entailing content development standards compliance, change management approvals for SIEM or UEBA content, and lifecycle management of developed security monitoring content
service operational requests in queue such as analytics content performance tuning, filtering, search refinement, parsing issues

Fulltime

Senior Cybersecurity Incident Response Analyst

You will work as a Senior Cybersecurity Incident Response Analyst as part of Hew...

Location

Ireland , Galway

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's degree (or equivalent work experience) required, preferably in computer science, engineering or related area of study
typically 4+ years of relevant experience
SOC team/Incident response analyst experience is required
proven track record of leading complex cybersecurity initiatives and managing ambiguous incidents
advanced understanding of adversary tactics, techniques, and procedures (TTPs)
advanced Cyber and IT security knowledge
advanced understanding of Cyber and IT security risks, best practices, threats and prevention measures as well as containment and remediation actions
advanced understanding of SQL and relevant scripting languages
advanced data security system analysis skills
advanced risk assessment and management skills

Job Responsibility

Lead and coordinate responses to the most complex cybersecurity incidents, guiding cross-functional teams through containment, eradication, and recovery
analyze associated logs and respond to high severity incidents
suggest automation opportunities to enhance IR
mentor and provide technical guidance to less experienced cybersecurity professionals
stay at the forefront of cybersecurity trends, threats, and technologies
foster a culture of continuous improvement and innovation
encourage the adoption of new technologies and methodologies
provide insight and guidance through after action reviews working with stakeholders.

What we offer

Comprehensive suite of benefits supporting physical, financial and emotional wellbeing
programs for professional and personal career development
unconditional inclusion and flexibility to manage work and personal needs.

Fulltime

Senior Security Engineer

Truveta is the world’s first health provider led data platform with a vision of ...

Location

United States , Seattle

Salary:

135000.00 - 180000.00 USD / Year

Truveta

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Cyber Security, Computer Science, Information Security, Information Systems, or a related field, or equivalent practical experience
5+ years of experience in Security Operations (SOC), Incident Response, or Detection & Response role, with demonstrated ownership of complex security incidents
Hands-on experience with Microsoft Sentinel (SIEM) and Microsoft Defender XDR (Defender for Endpoint, Identity, Office 365, Cloud Apps)
Proficiency in KQL (Kusto Query Language) for investigations, threat hunting, and detection engineering
Experience designing, tuning, and maintaining SIEM detections and SOAR automation, including alert triage and response workflows
Solid understanding of Azure cloud architecture, core services, and native security controls
Familiarity with Azure Entra ID, identity security concepts, RBAC, and IAM-related threats
Experience with handing high-severity security incidents, including cross-team coordination and stakeholder communication
Familiarity with MITRE ATT&CK, threat actor techniques, and modern attack methodologies across cloud, identity, and endpoint environments
Experience supporting on-call rotations and working in a 24/7 or follow-the-sun SOC environment

Job Responsibility

Incident Response: Handle investigation and response to security incidents across endpoints, identities, email, cloud workloads, and SaaS applications
Act as a senior escalation point for SOC analysts during complex or ambiguous security events
Participate in on-call rotations and provide senior-level escalation support when needed
Lead or contribute to post-incident reviews (RCA, postmortems) and track remediation actions to completion
Ensure incidents are accurately documented for audit, compliance, and operational learning
Maintain and improve incident response runbooks, playbooks, and escalation procedures
Support incident readiness activities, including tabletop exercises and response drills
Detection Engineering & Automation: Develop, tune, and maintain Microsoft Sentinel analytics rules to improve detection quality and reduce false positives
Design and optimize KQL queries for investigations, threat hunting, and detection engineering
Integrate and maintain log sources and data connectors in Microsoft Sentinel, ensuring data quality and proper normalization

What we offer

Interesting and meaningful work for every career stage
Great benefits package
Comprehensive benefits with strong medical, dental and vision insurance plans
401K plan
Professional development & training opportunities for continuous learning
Work/life autonomy via flexible work hours and flexible paid time off
Generous parental leave
Regular team activities (virtual and in-person)

Fulltime

Senior Consultant - Proactive Services

As a Senior Consultant in Unit 42 you will have the opportunity to work across a...

Location

Singapore , Singapore

Salary:

Not provided

Palo Alto Networks Italia

Expiration Date

Until further notice

Requirements

3+ years of consulting experience in SOC, security engineering, SIEM administration, and incident management
Demonstrated success with serving large, multinational organisations in designing and implementing an organisation’s security operations program
Possess a deep technical knowledge in Security Incident and Event Management (SIEM) platforms, Security Orchestration and Response (SOAR) technologies, Endpoint Protection and Response/Next Gen Protection and Response (EDR/XDR) tools, Next GenFirewalls, Threat Intelligence and Hunting platforms
Experience in security operations design, engineering and/or analysis and investigations, ideally in complex environments
Ability to perform detailed assessments, identify areas for improvement and make recommendations to transform an organisation's cyber security operations
Demonstrated experience in improving an organisations security operations capabilities
Experience in conducting threat hunting and/or compromise assessments
Relevant industry certifications including GIAC Defensible Security Architect (GDSA), GIAC Intrusion Analyst (GCIA), GIAC Continuous Monitoring (GMON), CISSP
Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC
3+ years of experience performing cloud security advisement and risk assessments

Job Responsibility

Work across a number of proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security
Deliver the best consulting outcomes for clients, as they work to address the challenges associated with today’s cyber threat landscape

Fulltime