This job might no longer be available.

Information Security Analyst - SecOps

Summary

What you'll do

• Provide senior level leadership (document and present strategy, develop, plan, execute) the strategic goals of Security Operations deliverables.
• Act as technical SME in the area of security and daily operation of XDR, IAM, Firewall, Email Gateway, SIEM, DLP, CASB and other security solutions.
• Provide technical expertise to maintain environments and troubleshoot issues.
• Act as a SME between the Business Partners and vendor technical contacts.
• Should handle the alerts/incidents created by other security solutions along with alerts initiated by MSSP
• Should have strong exp in handling XDR generated alerts/Incidents
• Work closely with our MSSP and handle the escalated incidents from them along with continuous fine tuning the process with them
• Ability to clearly communicate to key stakeholders including internal/external audit teams.
• Should have strong knowledge on Intrusion Detection/Prevention Systems (ID/PS), Network Traffic Analysis
• Should have strong experience on Email investigation, and Email Gateway Policies and configuration
• Should have strong knowledge on Network Intrusions, network topology, and related attacks/risks
• Should have the experience in working as Inhouse SOC or with MSSP
• Must be able to work independently to thoroughly investigate suspicious activity (including pivot to additional IOC’s without direction), clearly document all findings, and provide detailed remediation guidance to technology teams.
• Must be able to quickly and thoroughly provide detailed support for information requests from technology teams.
• Promote and work with team members to implement process improvement initiatives.
• Provide subject matter expertise on XDR, IAM, Firewall, Email Gateway, SIEM, DLP, CASB issues to Information Security leadership.
• Should continuously working on creating and maintaining the Documentation like Playbooks, Procedures, Technical documents, KB articles etc.

What we're looking for

• 7-11 years working in SOC, Incident Response, IAM, DLP, SIEM, Email Gateway, Firewall
• Bachelor’s degree in Information Systems, Cybersecurity, or a related field and minimum 7 years of relevant experience. Additional years of relevant experience will be considered in lieu of a degree.
• 9 years progressive experience in information technology
• Minimum of 7 - 9 years of practical information security experience.
• Demonstrated experience in working with a geographically dispersed team
• Experience working with Security Information Event Management (SIEM), Continuous Monitoring, Intrusion Detection/Prevention Systems (ID/PS), Network Traffic Analysis, Incident Response, Endpoint Security Systems, Digital Forensics, WLAN Monitoring, and/or Threat Modeling
• Expert knowledge of information security technologies, networking, systems, authentication (including MFA) and directory services.
• Ability to manage complex troubleshooting issues
• Proven ability to manage competing priorities and work under pressure
• Ability to contribute to the organizational strategic thinking beyond area of responsibility.
• CEH, CISM, CHFI, Security+, Network+ or certifications preferred
• Excellent collaboration skills – must be eager to work as part of a cohesive team and work as a partner to other teams within Aristocrat, Inc., locally and globally
• Exceptional communication skills, including the ability to gather relevant data and information, actively listen, dialogue freely, verbalize ideas effectively, negotiate tense situations successfully, and manage and resolve conflict