Lead Secops Analyst

Responsibilities:

• Alert triage - Investigate EDR, Entra, Email, and SIEM alerts to identify threats and anomalies.
• Perform detailed technical investigation on security incidents, root cause analysis, and recommend and mitigate the cyber incident as per the security framework.
• Create Incident Response process/runbooks/SOPs, ensure continuous documentation and reporting.
• Provide security advisory, develop use cases, support in deployment/integration, and fine-tuning of security platforms with other IT teams.
• Collaborate with Corporate IT teams to strengthen InMobi's security posture and reduce attack surface.
• Utilize open-source threat intelligence to evaluate threats and analyze their impact in the InMobi Environment, and deploy necessary detection/remediation procedures.
• Collaborate with other Tech and Non-tech teams to achieve the cybersecurity objectives of InMobi.
• Coordinate with stakeholders to understand the infrastructure, products, and business processes to ensure adequate security controls for the organization.
• Provide management with deep insight into threats, new threat detection methods, and technically lead other team members to resolve complex security problems.

Requirements:

• Minimum 8 years of experience in Security Operations/Incident Management is required.
• Self-motivated, Self-governing individual with a penchant for Cybersecurity and a sharp eye for details.
• Strong leadership skills in owning a technical lead on security issues at the Org and driving it towards closure.
• Strong technical leadership skills in guiding other team members for optimal outcomes.
• Strong ability to operate, decide, and evolve in ambiguous situations.
• Strong interpersonal skills, good team player, excellent written and verbal communication skills.
• Strong skills in correlating events, log analysis, networking basics, and cybersecurity fundamentals.
• Good knowledge of SOC frameworks - MITRE ATT and CK, NIST, cyber kill chain.
• Good understanding of multiple security tools like EDR, Email security, IPS/IDS, Firewall, and SIEM.
• Hands-on experience in one or more Security tools like McAfee EDR, FireEye, CrowdStrike EDR, Cortex XDR, and Microsoft XDR.
• Exposure to Cloud Security technologies is desirable.
• Exposure to implementing and securing AI technologies is desirable.
• Demonstrated good customer service, curiosity to learn, and adaptability.
• GIAC / CySA+ or equivalent certified professional is preferred.
• Open to learning new security concepts.

Skills

crowdstrike, edr, fireeye, incident management, incident response, secops, security operations, siem, soc, xdr