Senior Security Analyst

We're looking for a Senior Security Analyst in Pune to help protect TomTom's global environment from evolving cyber threats. You'll drive incident response, threat hunting, and detection engineering initiatives while working with a highly skilled and collaborative security team.

What You'll Do

• Monitor, triage, investigate, and respond to suspicious activity across all company assets.
• Perform log analysis and analyse datasets to support alert and response activities.
• Provide data driven insights to improve cybersecurity operations.
• Create & maintain detection use cases & implement improvements.
• Interface with other teams as required.
• Perform root cause analysis of security issues.
• Use a combination of manual and automated tools to proactively analyse various data.
• Help stakeholders to determine the best course of action to remedy the problem
• Work effectively with team members and leadership by communicating cybersecurity trends and sharing ideas and knowledge in a constructive and positive manner;
• Actively participate in our goal to continuously improve the way we work; identify improvement areas on our technology, process and techniques to enhance our detection and response capabilities.
• Ensure the ongoing core objectives of the CSIRT are accomplished and measurable.
• Be a part of our Security on-call rota

What you’ll need

• Minimum 5+ years working in security practices (CSIRT/SOC experience preferred);
• Demonstrable experience of the incident response lifecycle at both technical and procedural level;
• Demonstrable experience performing incident response across different operating systems
• Ability to quickly solve problems using scripting and automation;
• Strong understanding of IT fundamentals across networking, system, and application layers;
• Strong understanding of Cloud infrastructure & experience of incident response in cloud environments.
• Proven ability to prioritize incoming escalations and requests appropriately using clear communications;
• Excellent interpersonal and communication skills in order to share knowledge with peers and to communicate effectively with different stakeholders;
• Strong knowledge of Endpoint Detection and Response (EDR) tools for incident analysis;
• Expert knowledge of Security Incident & Event Monitoring (SIEM) tools for incident analysis;
• Willingness to be part of an on-call rota for out of hours escalations

What’s nice to have

• 5+ years working in an enterprise level organization with responsibilities related to computer security or system administration
• Experience in the automation & orchestration of security playbooks (SOAR)
• Strong written and verbal communication skills
• SANS certifications (GCIH, GFNA, GCIA, GSEC, etc.)
• Experience working with distributed teams