cyber incident analyst

Cencora

<div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p>Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!</p></div></div></div></div></div></div></div></div></div></div></div></div></div></div><p></p><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><h1 class="jobSectionHeader"><b>
Job Details
</b></h1></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><p></p><h1 class="jobSectionHeader"><b>Cyber Incident Response Manager &ndash; Pune, India</b></h1><h3 class="jobSectionHeader"><b>
Position Summary</b></h3><p>
The Cyber Incident Response Manager will play a key role in building and leading the Security Operations Center (SOC) in Pune, India. This role is responsible for managing day-to-day incident response operations, coordinating investigations, and driving continuous improvements to detection and response capabilities. The Manager will collaborate with global cyber defense teams to ensure timely containment, investigation, and remediation of security incidents. This position requires strong technical expertise in incident response, SOC operations, and security tooling, combined with leadership skills to grow and develop a high-performing team in India.</p><h3 class="jobSectionHeader"><b>
Primary Duties and Responsibilities</b></h3><ul><li><p>
Lead and manage the SOC team in Pune, including hiring, training, mentoring, and performance management of analysts and responders.</p></li><li><p>
Oversee daily incident detection, analysis, containment, eradication, and recovery efforts.</p></li><li><p>
Serve as the escalation point for high-priority or complex cyber incidents, ensuring timely response and communication to global stakeholders.</p></li><li><p>
Develop and maintain incident response playbooks, runbooks, and standard operating procedures.</p></li><li><p>
Partner with global SOC teams to align processes, technology, and reporting standards.</p></li><li><p>
Collaborate with threat intelligence, vulnerability management, forensics, and insider threat teams to drive a unified defense strategy.</p></li><li><p>
Manage relationships with key stakeholders in IT, Legal, Compliance, and Corporate Security during incident investigations.</p></li><li><p>
Provide executive-level reporting and updates on incident trends, SOC performance metrics, and operational risks.</p></li><li><p>
Ensure incident response activities comply with global regulatory and organizational requirements.</p></li><li><p>
Drive continuous improvement of detection rules, automation, and response workflows in the SOC.</p></li></ul><h3 class="jobSectionHeader"><b>
Education and Qualifications</b></h3><ul><li><p>
Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Technology, or a related discipline required; Master&rsquo;s degree preferred.</p></li><li><p>
Strong knowledge of incident response methodology, SOC operations, and security frameworks (e.g., NIST, MITRE ATT&amp;CK).</p></li><li><p>
Familiarity with global privacy and compliance requirements relevant to incident handling.</p></li></ul><h3 class="jobSectionHeader"><b>
Preferred Certifications</b></h3><ul><li><p>
GIAC Certified Incident Handler (GCIH)</p></li><li><p>
GIAC Certified Intrusion Analyst (GCIA)</p></li><li><p>
GIAC Certified Forensic Analyst (GCFA)</p></li><li><p>
Certified Ethical Hacker (CEH)</p></li><li><p>
Certified Information Systems Security Professional (CISSP)</p></li></ul><h3 class="jobSectionHeader"><b>
Work Experience</b></h3><ul><li><p>
8&ndash;10 years of progressive experience in cybersecurity, with at least 5 years focused on SOC operations or incident response.</p></li><li><p>
Minimum of 3 years in a people management role, leading incident response or SOC analyst teams.</p></li><li><p>
Hands-on experience with SIEM, EDR, SOAR, and forensic tools (e.g., Splunk, CrowdStrike, Microsoft Defender, etc)</p></li><li><p>
Proven experience responding to advanced threats, ransomware, phishing campaigns, and insider incidents.</p></li><li><p>
Demonstrated success in building or scaling SOC teams in a global enterprise environment.</p></li><li><p>
Strong communication skills, with the ability to brief technical and non-technical stakeholders during incidents.</p></li></ul><p></p><p>
.</p><div>
EDUCATIONAL QUALIFICATIONS:<br>
Education:<br>
Bachelor&rsquo;s Degree in Computer Science, Information Technology or any other related discipline or equivalent related experience.<br>
<br>
Preferred Certifications:<br>
<ul><li>Certified Information Systems Auditor (CISA)</li><li>Certified Information Systems Security Professional (CISSP)</li><li>Certification in Information Security Strategy Management (CISM)</li></ul></div><ul><li>Information Technology Infrastructure Library (ITIL)</li><li>Offensive Security Certified Professional (OSCP)</li><li>Project Management Professional (PMP) Certification</li><li>TS-SCI Security Clearance Certification</li></ul><p></p><div>
WORK EXPERIENCE:<br>
<ul><li>5+ years of directly-related or relevant experience with 2+ years in a managerial capacity, preferably in information security.</li></ul></div><p></p><div>
SKILLS &amp; KNOWLEDGE:<br>
Behavioral Skills:<br>
<ul><li>Coaching and Mentoring</li><li>Collaboration</li><li>Conflict Resolution</li><li>Critical Thinking</li><li>Detail Oriented</li><li>People Management</li><li>Presentation Skills</li></ul></div><p></p><div>
Technical Skills:<br>
<ul><li>IT Risk Management</li><li>IT Controls</li><li>Cyber Attack Mitigation</li><li>Enterprise Architecture</li><li>Information Security Strategy Standards (SOX, ISO 27001/27002, COBIT, ITIL, NIST, PCI)</li><li>IT Risk Management</li><li>Network Security</li><li>Information Security Strategy Continuity</li><li>Threat Modelling</li></ul></div><p></p><div>
Tools Knowledge:<br>
<ul><li>Microsoft Office Suite</li><li>Security Tools - SIEM, EDR, Email Security Gateway, SOAR, Firewall, Anti-virus, Firewalls, VPN IDS/IPS, AV, proxies, etc.</li><li>Security Testing Tools - Open Source and COTS security tools</li></ul></div><ul><li>Threat Intelligence Tools</li><li>Vulnerability Testing Tools</li></ul><p></p><h1 class="jobSectionHeader"><b>
What Cencora offers</b></h1><p></p><p>
Benefit offerings outside the US may vary by country and will be aligned to local market practice. The eligibility and effective date may differ for some benefits and for team members covered under collective bargaining agreements.</p><p></p>
Full time<p></p><h1 class="jobSectionHeader"><b>
Affiliated Companies</b></h1>
Affiliated Companies: AmerisourceBergen Services Corporation<p></p><h1 class="jobSectionHeader"><b>
Equal Employment Opportunity</b></h1><p>
Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.</p><p></p><p>
The company&rsquo;s continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.</p><p></p><p>
Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email hrsc@cencora.com. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned</p></div>

Mgr - Cyber Incident Response (IN)

<div>
 <p>
  <strong>
   Line of Service
   <br/>
  </strong>
  Advisory
  <br/>
  <br/>
  <p>
   <strong>
    Industry/Sector
    <br/>
   </strong>
   Technology
   <br/>
   <br/>
   <p>
    <strong>
     Specialism
     <br/>
    </strong>
    Advisory - Other
    <br/>
    <br/>
    <p>
     <strong>
      Management Level
      <br/>
     </strong>
     Associate
     <br/>
     <br/>
     <p>
      <strong>
       Job Description &amp; Summary
       <br/>
      </strong>
      At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.
      <br/>
      <br/>
      As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.
      <br/>
      <br/>
      <span>
       <span>
        <span>
         Key Responsibilities
        </span>
       </span>
      </span>
      <ul>
       <li>
        <span>
         <span>
          <span>
           Assess and manage cyber security risks related to IT compliance, audits, and information security.
          </span>
         </span>
        </span>
       </li>
       <li>
        <span>
         <span>
          <span>
           Implement and maintain governance, risk management, and compliance (GRC) frameworks.
          </span>
         </span>
        </span>
       </li>
       <li>
        <span>
         <span>
          <span>
           Ensure alignment with relevant standards, including ISO 27001 and NIST Cybersecurity Framework (CSF).
          </span>
         </span>
        </span>
       </li>
       <li>
        <span>
         <span>
          <span>
           Conduct risk assessments and penetration tests to identify vulnerabilities.
          </span>
         </span>
        </span>
       </li>
       <li>
        <span>
         <span>
          <span>
           Collaborate with IT and security teams to develop and enforce security policies and procedures.
          </span>
         </span>
        </span>
       </li>
       <li>
        <span>
         <span>
          <span>
           Provide training and guidance on cyber security best practices and compliance requirements.
          </span>
         </span>
        </span>
       </li>
       <li>
        <span>
         <span>
          <span>
           Prepare reports and presentations for stakeholders regarding risk management activities and compliance status.
          </span>
         </span>
        </span>
       </li>
       <li>
        <span>
         <span>
          <span>
           Stay updated on the latest trends and threats in cybersecurity.
           <br/>
           <br/>
          </span>
         </span>
        </span>
       </li>
      </ul>
      <span>
       <span>
        <span>
         Qualifications
        </span>
       </span>
      </span>
      <ul>
       <li>
        <span>
         <span>
          <span>
           Fluent in English
          </span>
         </span>
        </span>
       </li>
       <li>
        <span>
         <span>
          <span>
           Strong knowledge of IT compliance, IT audit processes, and information security principles.
          </span>
         </span>
        </span>
       </li>
       <li>
        <span>
         <span>
          <span>
           Familiarity with governance, risk, and compliance (GRC) frameworks.
          </span>
         </span>
        </span>
       </li>
       <li>
        <span>
         <span>
          <span>
           Experience with ISO 27001 and NIST CSF standards.
          </span>
         </span>
        </span>
       </li>
       <li>
        <span>
         <span>
          <span>
           Excellent analytical and problem-solving skills.
          </span>
         </span>
        </span>
       </li>
       <li>
        <span>
         <span>
          <span>
           Strong communication and interpersonal skills, with the ability to convey complex information clearly.
           <br/>
           <br/>
          </span>
         </span>
        </span>
       </li>
      </ul>
      <span>
       <span>
        <span>
         Preferred Skills
        </span>
       </span>
      </span>
      <ul>
       <li>
        <span>
         <span>
          <span>
           Certifications such as CISSP, CISM, or CISA are a plus.
          </span>
         </span>
        </span>
       </li>
       <li>
        <span>
         <span>
          <span>
           Experience with security tools and technologies.
          </span>
         </span>
        </span>
       </li>
       <li>
        <span>
         <span>
          <span>
           Ability to work independently as well as part of a team.
           <br/>
          </span>
         </span>
        </span>
       </li>
      </ul>
      <p>
       <strong>
        Required Skills
        <br/>
        <br/>
       </strong>
       <p>
        <strong>
         Optional Skills
         <br/>
        </strong>
        Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Azure Data Factory, Communication, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Managed Services, Optimism, Privacy Compliance, Regulatory Response, Security Architecture, Security Compliance Management, Security Control, Security Incident Management, Security Monitoring {+ 3 more}
        <br/>
        <br/>
        <p>
         <strong>
          <span>
           Desired Languages
          </span>
         </strong>
         <em>
          <span>
           (If blank, desired languages not specified)
           <br/>
           <br/>
          </span>
         </em>
         <p>
          <strong>
           Travel Requirements
           <br/>
          </strong>
          Not Specified
          <br/>
          <br/>
          <p>
           <strong>
            Available for Work Visa Sponsorship?
            <br/>
           </strong>
           No
           <br/>
           <br/>
           <p>
            <strong>
             Government Clearance Required?
             <br/>
            </strong>
            No
            <br/>
            <br/>
            <p>
             <strong>
              Job Posting End Date
              <br/>
              <br/>
              <br/>
              <br/>
             </strong>
            </p>
           </p>
          </p>
         </p>
        </p>
       </p>
      </p>
     </p>
    </p>
   </p>
  </p>
 </p>
</div>


ETIC, Cyber Risk Associate

Deloitte

<div></div><div><div><div><div><div>Job requisition ID :: 91247
</div></div></div></div><div><div><div><div>Date: Nov 8, 2025
</div></div></div></div><div><div><div><div>Location: Mumbai
</div></div></div></div><div><div><div><div>Designation: Consultant
</div></div></div></div><div><div><div><div>Entity: Deloitte Touche Tohmatsu India LLP<br>
</div></div></div></div><p></p><div><div><div><div><div><b>Your potential, unleashed.</b></div>
<p>
India&rsquo;s impact on the global economy has increased at an exponential rate and Deloitte presents an opportunity to unleash and realize your potential amongst cutting edge leaders, and organizations shaping the future of the region, and indeed, the world beyond.
</p><p>At Deloitte, your whole self to work, every day. Combine that with our drive to propel with purpose and you have the perfect playground to collaborate, innovate, grow, and make an impact that matters.</p><br>
<div>
</div><div><b>The team</b></div>
<p>
Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient&mdash;not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks<br>
</p><p><br>
<b>Preferred Knowledge</b></p>
<ul>
<li>Monitor alerts from <b>SIEM, EDR, Email Security, and other security platforms</b> for potential incidents.</li>
<li>Perform <b>initial triage</b> of security alerts &mdash; determine severity, verify legitimacy, and classify the incident type.</li>
<li>Conduct <b>basic investigation</b> of suspicious activity such as phishing, malware infection, or unauthorized access attempts.</li>
<li>Escalate validated incidents to <b>Incident Response L2/L3</b> for in-depth analysis and containment.</li>
<li>Document all actions in <b>incident tracking systems</b> (e.g., ServiceNow, JIRA, SOAR platforms).</li>
<li>Assist in executing <b>first-level containment actions</b>, such as isolating endpoints or disabling compromised accounts (based on defined SOPs).</li>
<li>Coordinate with SOC teams to ensure timely <b>alert response and incident closure</b>.</li>
<li>Participate in <b>post-incident reviews</b> to identify improvements in detection and response processes.</li>
<li>Maintain awareness of emerging threats and contribute to continuous process improvement.</li></ul><br>
<p></p>
<p><b>
Required Qualifications:</b></p>
<ul>
<li>Education: Bachelor&rsquo;s degree in computer science, Cybersecurity, or related field, or equivalent experience.</li>
</ul><ul><li>Proficiency in scripting and automation (Python, Bash, or PowerShell) is a plus.
</li><li>Familiarity with network security tools, firewalls, IDS/IPS, EDR, and other security technologies.
</li><li>In-depth knowledge of security frameworks (e.g., MITRE ATT&amp;CK, NIST, ISO 27001).</li><br>
</ul>
<div></div><div><b>How you&rsquo;ll grow</b></div>
<p><b>
Connect for impact</b></p>
<p>
Our exceptional team of professionals across the globe are solving some of the world&rsquo;s most complex business problems, as well as directly supporting our communities, the planet, and each other. Know more in our Global Impact Report and our India Impact Report.
</p><p><b>Empower to lead</b></p>
<p>
You can be a leader irrespective of your career level. Our colleagues are characterised by their ability to inspire, support, and provide opportunities for people to deliver their best and grow both as professionals and human beings. Know more about Deloitte and our One Young World partnership.
</p><p><b>Inclusion for all</b></p><br>
<div></div>
<p>
At Deloitte, people are valued and respected for who they are and are trusted to add value to their clients, teams and communities in a way that reflects their own unique capabilities. Know more about everyday steps that you can take to be more inclusive. At Deloitte, we believe in the unique skills, attitude and potential each and every one of us brings to the table to make an impact that matters.
</p><p><b>Drive your career</b></p>
<p>
At Deloitte, you are encouraged to take ownership of your career. We recognise there is no one size fits all career path, and global, cross-business mobility and up / re-skilling are all within the range of possibilities to shape a unique and fulfilling career. Know more about Life at Deloitte.
</p><p><b>Everyone&rsquo;s welcome&hellip; entrust your happiness to us</b></p>
<p>
Our workspaces and initiatives are geared towards your 360-degree happiness. This includes specific needs you may have in terms of accessibility, flexibility, safety and security, and caregiving. Here&rsquo;s a glimpse of things that are in store for you. <b>Interview tips</b></p>
<p>
We want job seekers exploring opportunities at Deloitte to feel prepared, confident and comfortable. To help you with your interview, we suggest that you do your research, know some background about the organisation and the business area you&rsquo;re applying to. Check out recruiting tips from Deloitte professionals.
</p><p>*Caution against fraudulent job offers*: We would like to advise career aspirants to exercise caution against fraudulent job offers or unscrupulous practices.
</p><p>At Deloitte, ethics and integrity are fundamental and not negotiable. We do not charge any fee or seek any deposits, advance, or money from any career aspirant in relation to our recruitment process. We have not authorized any party or person to collect any money from career aspirants in any form whatsoever for promises of getting jobs in Deloitte or for being considered against roles in Deloitte. We follow a professional recruitment process, provide a fair opportunity to eligible applicants and consider candidates only on merit. No one other than an authorized official of Deloitte is permitted to offer or confirm any job offer from Deloitte. We advise career aspirants to exercise caution.
</p><p>In this regard, you may refer to a more detailed advisory given on our website at:
</p><p>https://www2.deloitte.com/in/en/careers/advisory-for-career-aspirants.html?icid=wn_</p></div></div></div></div></div><p></p>

T&T | Cyber : D&R | Incident Response & Handling | Consultant | Mumbai

<div><p><b>Line of Service
</b></p>Advisory
<p></p><p><b>Industry/Sector
</b></p>Technology
<p></p><p><b>Specialism
</b></p>Advisory - Other
<p></p><p><b>Management Level
</b></p>Associate
<p></p><p><b>Job Description &amp; Summary
</b></p>At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.
<br>
<br>
As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.
<p></p><h2 class="jobSectionHeader"><b>Key Responsibilities
</b></h2><ul><li>Assess and manage cyber security risks related to IT compliance, audits, and information security.
</li><li>Implement and maintain governance, risk management, and compliance (GRC) frameworks.
</li><li>Ensure alignment with relevant standards, including ISO 27001 and NIST Cybersecurity Framework (CSF).
</li><li>Conduct risk assessments and penetration tests to identify vulnerabilities.
</li><li>Collaborate with IT and security teams to develop and enforce security policies and procedures.
</li><li>Provide training and guidance on cyber security best practices and compliance requirements.
</li><li>Prepare reports and presentations for stakeholders regarding risk management activities and compliance status.
</li><li>Stay updated on the latest trends and threats in cybersecurity.
</li></ul><p></p><h2 class="jobSectionHeader"><b>Qualifications
</b></h2><ul><li>Fluent in English
</li><li>Strong knowledge of IT compliance, IT audit processes, and information security principles.
</li><li>Familiarity with governance, risk, and compliance (GRC) frameworks.
</li><li>Experience with ISO 27001 and NIST CSF standards.
</li><li>Excellent analytical and problem-solving skills.
</li><li>Strong communication and interpersonal skills, with the ability to convey complex information clearly.
</li></ul><p></p><h2 class="jobSectionHeader"><b>Preferred Skills
</b></h2><ul><li>Certifications such as CISSP, CISM, or CISA are a plus.
</li><li>Experience with security tools and technologies.
</li><li>Ability to work independently as well as part of a team.
</li></ul><p></p><p><b>Education </b><i>(if blank, degree and/or field of study not specified)
</i></p>Degrees/Field of Study required:
<p></p>Degrees/Field of Study preferred:
<p></p><p><b>Certifications </b><i>(if blank, certifications not specified)
</i></p><p></p><p><b>Required Skills
</b></p><p></p><p><b>Optional Skills
</b></p>Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Azure Data Factory, Communication, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Managed Services, Optimism, Privacy Compliance, Regulatory Response, Security Architecture, Security Compliance Management, Security Control, Security Incident Management, Security Monitoring {+ 3 more}
<p></p><p><b>Desired Languages </b><i>(If blank, desired languages not specified)
</i></p><p></p><p><b>Travel Requirements
</b></p>Not Specified
<p></p><p><b>Available for Work Visa Sponsorship?
</b></p>No
<p></p><p><b>Government Clearance Required?
</b></p>No
<p></p><p><b>Job Posting End Date</b></p></div><p></p>

SF Recruitment

<p>IT Security Analyst with experience monitoring and analysing security threats is sought by a high growth scale up based South Birmingham. Working at the forefront of national security innovation this IT Security Analyst will work closely with within the in-house cyber security team to monitor and triage security alerts alongside assist in vulnerability protection ensuring a high level of cyber protection for this scaling business. This role would suit a IT security Analyst with a couple of years commercial experience who is looking for excellent training, a clear progression pathway and scope to utilise the latest technology to deliver solutions of national significance. This IT Security Analyst based near Birmingham should have most of the following key skills: - At least two years commercial info sec or cyber experience - Root cause analysis skills - A real passion for cyber - Experience creating and maintaining incident logs - strong communication skills with the ability to articulate complex technical concepts to senior non-technical stakeholders - Experience working in a scale up or SME environment would be advantageous - A positive, engaging personality with no ego but the resolve to challenge and question existing process the norm when required This IT Security Analyst based near Birmingham will receive - Generous starting salary - Flexible working - Extensive personal development scheme - 25 days holiday - 10% private pension scheme - Bonus - Private healthcare - Truly autonomous, collaborative culture with extensive growth potential - Regular remuneration reviews So if you are an IT Security Analyst who wants to join a market leading business with innovation at its core please apply now to be considered Birmingham Cyber, information security, cyber essentials, defence, incident logs</p>

IT Security Analyst

Baker Hughes

<div><p><b>Senior Cybersecurity Event Triage Analyst</b></p><p></p><p>
Do you like working on identifying and preventing potential cybersecurity risks?</p><p><br>
Are you ready for the next step in your career?</p><p><b><br>
Join our Digital Technology Team!</b></p><p><br>
Our Digital Technology business provides intelligent, connected technologies to monitor and control our energy extraction assets. We provide customers with the peace of mind needed to reliably and efficiently improve their operations. Our team creates business value through continuous improvement in up-time, resilience, performance, time to market, security and compliance</p><p><b><br>
Partner with the best</b></p><p><br>
As an Event Triage Analyst you will play a crucial role in safeguarding Baker Hughes information systems by analyzing a wide range of cybersecurity events. Your primary focus will be on identifying, investigating, and interpreting security incidents and trends, and making recommendations on appropriate containment and remediation steps. You will be at the forefront of detecting potential threats and vulnerabilities, providing critical insights that drive our cybersecurity defense strategies.</p><p></p><p><b>
As a Senior </b><b>Cybersecurity Event Triage Analyst </b><b>You will be responsible for:</b></p><ul><li><p>
Actively monitor and analyze cybersecurity events from various sources. Use analytical skills to identify, assess, and understand potential security incidents and trends.</p></li><li><p>
Playing a key role in the incident response process, focusing on the analysis and interpretation of threat data to guide response actions.</p></li><li><p>
Leveraging threat intelligence to enhance the understanding of potential security threats and inform the organization's cybersecurity posture.</p></li><li><p>
Preparing clear and detailed reports on security findings and trends. Communicate effectively with both technical and non-technical stakeholders.</p></li><li><p>
Ensuring adherence to regulatory standards and best practices in cybersecurity event analysis and reporting.</p></li><li><p>
Keeping abreast of the latest cybersecurity trends, threats, and technologies to continuously enhance analysis capabilities.</p></li></ul><p></p><p><b>
Required Qualifications</b></p><ul><li><p>
Have Bachelor&rsquo;s degree in Cybersecurity, Information Technology, or a related field</p></li><li><p>
Have Technical Skills: Strong analytical skills in cybersecurity. In-depth knowledge of various Cloud security concepts, EDR, SIEM, and SOAR, and experience with responding to complex cybersecurity incidents is desirable.</p></li><li><p>
Have Certifications: Relevant certifications such as CompTIA Security+, CEH, GCIH, or similar are advantageous.</p></li><li><p>
Have Experience: 5+ years of SOC experience with focus on security event analysis and incident response is advantageous.</p></li><li><p>
Have a Communication Skills: Excellent verbal and written communication skills.</p></li><li><p>
Have Time Flexibility: This position may require working non-traditional hours.</p></li></ul><p></p><p><b>
Work in a way that works for you</b></p><p><br>
We recognize that everyone is different and that the way in which people want to work and deliver at their best is different for everyone too. In this role, we can offer the following flexible working patterns:</p><ul><li>
Working flexible hours - flexing the times when you work in the day to help you fit everything in and work when you are the most productive.</li><li>
Occasionally working remotely from home or any other work location</li></ul><p><b><br>
Working with us</b></p><p><br>
Our people are at the heart of what we do at Baker Hughes. We know we are better when all of our people are developed, engaged and able to bring their whole authentic selves to work. We invest in the health and well-being of our workforce, train and reward talent and develop leaders at all levels to bring out the best in each other.</p><p><b><br>
Working for you</b></p><p><br>
Our inventions have revolutionized energy for over a century. But to keep going forward tomorrow, we know we have to push the boundaries today. We prioritize rewarding those who embrace change with a package that reflects how much we value their input. Join us, and you can expect:</p><ul><li>
Contemporary work-life balance policies and wellbeing activities</li><li>
Comprehensive private medical care options</li><li>
Safety net of life insurance and disability programs</li><li>
Tailored financial programs</li><li>
Additional elected or voluntary benefits</li></ul><p></p><b>
About Us:</b><div>
We are an energy technology company that provides solutions to energy and industrial customers worldwide. Built on a century of experience and conducting business in over 120 countries, our innovative technologies and services are taking energy forward &ndash; making it safer, cleaner and more efficient for people and the planet.</div><br>
<b>
Join Us:</b><div>
Are you seeking an opportunity to make a real difference in a company that values innovation and progress? Join us and become part of a team of people who will challenge and inspire you! Let&rsquo;s come together and take energy forward.<br>
<br>
Baker Hughes Company is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.</div></div>

Senior Cybersecurity Event Triage Analyst

Naufar

<div>
 <p>
  <strong>
   JOB PURPOSE:
  </strong>
 </p>
 <p>
  The Cyber Security Analyst creates a comprehensive program for establishing a Healthcare carrier-class Security Operation Center. S/he develop and maintain threat monitoring and security incident response procedures within Naufar. The analyst designs frameworks, procedures, and toolkits to enhance capabilities in professional forensic collection and digital evidence analysis. S/he also develop dashboards for reporting the organization's threat landscape, Awareness and security posture to senior management. This role is expert role with roles and responsibilities.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Description
  </strong>
 </p>
 <ul>
  <li>
   Develops and implements a cyber-security program to enhance Naufar capabilities regarding Cyber Attack incident monitoring, incidents response and intrusive and non-intrusive forensics capabilities.
  </li>
  <li>
   Develops and matures the service capabilities of the SOC, such as Forensics, Threat Management, Penetration Assessments, and Tool Management.
  </li>
  <li>
   Develops, Contributes and maintains of the cyber security strategy.
  </li>
  <li>
   Implements, configures and maintains security control and process, to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.
  </li>
  <li>
   Identifies deficiencies and recommends corrective action to strengthen information security control and decrease the risk of data breach.
  </li>
  <li>
   Maintains and updates standard operation policies and procedures for incident response plans, e-discovery processing, remote acquisition/analysis tools, collections and forensic analysis techniques.
  </li>
  <li>
   Maintains industry standard tools and processes used for forensic analysis and eDiscovery collections and processes.
  </li>
  <li>
   Monitors security alerts for potential events/incidents as well as trending and historical analysis and ensuring all incident reports are complete and written within standard operations and ensures ticket audits and reviews are completed
  </li>
  <li>
   Utilizes leading forensic software to identify, collect, preserve and analyze electronic data from laptops, desktops, servers, email archives, infrastructure logs, network file servers, backup tapes, cell phones, PDAs and a wide variety of other media devices.
  </li>
  <li>
   Manages requests for electronic data and digital forensic investigations that relate to Litigation, Regulatory matters, Compliance, and Employee Investigations.
  </li>
  <li>
   Performs cybersecurity incident analysis and assist with incident response, including analysis of network content and metadata for investigations or malware detection and identifies the cause and extent of a breach.
  </li>
  <li>
   Serves as a subject matter expert and technical advisor in matters relating to the proper collection, preservation, packaging, and submission of digital and multimedia evidence.
  </li>
  <li>
   Participates in incident electronic evidence collection activities in major field investigations. Ensures evidence handling requirements are met.
  </li>
  <li>
   Performs post-incident report according to standard operations.
  </li>
  <li>
   Analyzes the tools and methodology used for investigation and accordingly presents improvements in control and corrective actions if any.
  </li>
  <li>
   Escalates and works with senior management on resolutions to overdue security items or any negative trends identified.
  </li>
  <li>
   Develops focused reporting and briefings for advanced cyber threats.
  </li>
  <li>
   Conducts studies and research for improving forensic analyses, scientific methods, and resolving forensic examination problems.
  </li>
  <li>
   Creates detailed, professional documentation and reports, including performance metrics and presentations for management.
  </li>
  <li>
   Leads or contributes to key projects related to corporate threat monitoring, forensics or information security initiatives.
  </li>
  <li>
   Facilitates group risk assessment activities and identifies any security-related process improvement opportunities.
  </li>
  <li>
   Monitors and performs trending on root cause analysis activities within assigned group and participates as needed to resolve clinical systems security related incidents.
  </li>
  <li>
   Assists on monitoring compliance with information security policies, standards and ENTERPRISE-WIDE strategy and facilitates threat and vulnerability evaluations on a regular basis. Measures and reports on the effectiveness of information security controls.
  </li>
  <li>
   Supports the security initiatives, corrective and preventative actions, and security measures by ensuring timely updates and escalating concerns and non-compliances.
  </li>
  <li>
   Understands and maintains the appropriate knowledge of Security Technologies, (Firewall, Anti-Virus, Email and Web Encryption, HIPS, NIPS, SIEM, WAF, DLP), security procedures, and services within Naufar IT Security as well as ensures all tools are functioning properly.
  </li>
  <li>
   Keeps up to date on changes to significant regulatory and applicable standards issued by internal or external agencies, as applicable to the Naufar&rsquo;s domain.
  </li>
  <li>
   Adheres to Naufar&rsquo;s standards as they appear in the Code of Conduct and Conflict of Interest policies
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Academic Qualifications:
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree &ndash; IT - Mandate
  </li>
  <li>
   Master&rsquo;s degree &ndash; Cybersecurity - Desired
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Experience Requirements:
  </strong>
 </p>
 <ul>
  <li>
   8+ years of experience working as a security analyst or SME within a Security Operations Center with exposure to cyber security collection, analysis and threats management, investigation and digital forensics.
  </li>
  <li>
   Demonstrated experience in threat detection and analysis, incident response, and reporting.
  </li>
  <li>
   Demonstrated experience with incident response, deep dive forensics, insider threat, cyber and data exfiltration incidents.
  </li>
  <li>
   Demonstrated experience conducting assessments, digital forensic investigations, vulnerability management and incident response.
  </li>
  <li>
   Demonstrated experience with current cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks.
  </li>
  <li>
   Demonstrated experience with SEIM products in the detection, response, mitigation, and/or reporting of cyber threats
  </li>
  <li>
   Demonstrated experience in the use of forensic tools (e.g. FTK, Encase, Forensic Toolkit, X-Ways, Linux based tools, etc.)
  </li>
  <li>
   Experienced with (or equivalent) the following regulations and frameworks: PCI, HIPAA, and ISO/IEC 2700x
  </li>
 </ul>
</div>


Cyber Security Analyst

Search 4916+ Cyber incident analyst jobs near you this November. New roles added regularly across leading industries. Apply today.

4916 cyber incident analyst jobs NEAR_ME

Mgr - Cyber Incident Response (IN)

ETIC, Cyber Risk Associate

T&T | Cyber : D&R | Incident Response & Handling | Consultant | Mumbai

ETIC, Cyber Risk Associate

IT Security Analyst

Senior Cybersecurity Event Triage Analyst

Cyber Security Analyst