Security Monitoring and Response Analyst

Role:

• 24/7 Security monitoring and response to incident and security triage of incident.

• Responds to security events triggered by security detection tools, documenting all actions in the security log, escalating significant issues.

• Follows defined processes and recommends process improvements.

• Ability to documented change/update in the process of standard operating procedure/runbook/use case.

• Works to improve cyber security acumen to ensure they are up-to-date on security techniques and practices.

• Reports to management any issues or areas in the process that need to be addressed.

• Conduct proper evidence collection for all commercial platforms utilized in the Mastercard environment.

All About You:

The ideal candidate for this position should:

• Work experience within a SOC, incident response or digital forensics investigation

• Expertise on Splunk enterprise security (SIEM) and ability to corelate events as well able to write correlation rules.

• Better understanding of ITSM Process & Incident Lifecycle - NIST 800-61.

• Details understanding of event logs of Windows & Linux environment along with supporting application.

• Experience with Windows, Unix Based Operating Systems, and Cloud Security investigation . (Preferably Azure Security & Microsoft Security control)

• Monitoring skills on Web application firewall, Data loss prevention, Endpoint/EDR response and appropriate response accordingly.

• Strong understanding of TCP/IP, MITRE ATT&CK, Kill Chain, Incident Management and Networking principles

• Ability to work effectively in ambiguous and/or high-pressure situations

• Be skilled at explaining technical problems succinctly and clearly