Information Security Analyst
- Coforge
- 7 - 12 years
- Noida, Gurugram
- 1 month ago
- Email to a friend
- Report this job
Job Description
Title: CTM Engineer/Analyst (Information Security Analyst)
Business Area: Information Security
Experience: 5-8 years
Education: Graduation+
CERTIFICATION(S): Security +, GCIH, GSOC, GCDA, GCIA
Core purpose:
The risk and threat to the confidentiality, integrity and availability of clients data is constantly evolving and the security of our information is paramount to the company brand. You will demonstrate excellence and professional Information Security capabilities through your daily activities. This will be through a proactive approach and attention to detail for all aspects of Information and Cyber Security.
This is firstly to ensure that client has its and Clients data, infrastructure, services, and operations protected through appropriate governance and controls. Secondly you will contribute to and help to maintain the clients Information Security certifications so that we are in prime position to win new opportunities that the company pursues.
Mandatory requirements for the role for CTM:
- Experience of using security tools - SIEM, Anti-Virus, Threat Intel Platform, DLP monitoring, Vulnerability Management, SOAR, etc.
- Experience of using Cloud security tools - MS Defender for Cloud, Intune, Purview.
- Ability to create standard operating procedures (SOPs) and Playbooks for Information Security tasks.
- To be able to understand cyber-attacks and how they relate to the Mitre Framework and Tactics, Techniques and Procedures (TTP).
- Keep up to date with Cyber Threat Intelligence (CTI) emerging threats through security advisories, forums, and personal research.
Key responsibilities:
- Experience of using security tools - SIEM, Anti-Virus, Threat Intel Platform, DLP monitoring, Vulnerability Management, SOAR, etc.
- Experience of using Cloud security tools - MS Defender for Cloud, Intune, Purview.
- As a member of the Information Security team complete the daily, monthly, and annual security checks of Threat Intel sources, security tool alerts and security reports.
- Responsible for escalation within the SecOps team for security issues to required timescales and quality; supporting technical and business stakeholders by providing (locally and remotely) InfoSec support, processing demands and ensuring these are completed within the required timescale.
- To produce new standard operating procedures (SOPs) and Playbooks for Information Security tasks.
- To understand technical IS or IT designs and assist with their production.
- Produce and maintain Information Security supporting records. Such as Network Topology or Data Flow diagrams for services provided to clients.
- To be able to understand cyber-attacks and how they relate to the Mitre Framework and Tactics, Techniques and Procedures (TTP).
- Understand and adhere to all policies, procedures, and relevant legislation; ensure ISMS documentation is up to date and accurate.
- Keep up to date with Cyber Threat Intelligence (CTI) emerging threats through security advisories, forums, and personal research.
- Production of scope of work documentation for Penetration Testing exercises and the scheduling of periodic scan activities.
- Own tasks associated with ISO27001, SOX, PCI/DSS, NIST and Cyber Essentials audit activities.
- Contribute to improving the Security Maturity NIST programme.
- The production of high-level technical designs and assist others with peer reviews.
- Knowledge and understanding of GDPR, ISO27001 and NIST CSF.
- Help to maintain the Information Security Management System (ISMS) framework and other regulatory standards.
Stakeholder engagement:
- Assist with Client and Internal audit activities.
- Assist Independent auditors and suppliers to investigate and progress any identified risks or threats to an appropriate conclusion.
Performance management:
- Contribute to team meetings with your views and recommendations in aid to improving efficiency and capability of Information Security.
- Identify areas for improvement within existing policies, procedures, reports, and tools to improve the efficiency and capability of Information Security.
- Produce and contribute to your performance development plan. This will be managed and progresses through 1-2-1 meetings.
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Security Engineer / AnalystEmployement Type: Full timeContact Details:
Company: CoforgeLocation(s): Noida, Gurugram
Keyskills: Cyber Threat Ms Defender SIEM Soar
Similar positions
Coforge
Coforge is a global digital services and solutions provider, that enables its clients to transform at the intersect of domain expertise and emerging technologies to achieve real-world business impact. A focus on very select industries, a detailed understanding of the underlying processes of those in...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in