Cyber Cloud Monitoring Analyst

Description:

Working as a member of Information Security team, the Cyber Cloud Monitoring Analyst is part of the global team that is responsible for providing 24/7 real-time monitoring of the firm's cloud security posture within Azure, AWS, and CGP.

This team is also responsible for incident identification, documentation, remediation and tracking for all cloud services. More specifically, the Supplier Personnel will support the global Cyber Cloud Monitoring function and have following key responsibilities:

Technical Skills:

· Perform investigation and escalation for complex or high severity security threats or incidents and handles and analyze security issues/threats in Azure cloud.

· Acting as an escalation point for Tier I analysts and further analyzing events of interest

· Ensures that all identified events are promptly validated and thoroughly investigated

· Collaborates with technical teams to identify, resolve, and mitigate events

· Provides advice and guidance on the response action plans for information risk events and incidents based on incident type and severity

· Assists with containment of threats and remediation of environment during or after an incident

· Work with SIEM Engineering and other security partners developing and refining correlation rules

· Regularly develop new and interesting use cases for future SIEM logic

· Administer and configure security tools and sensors to alert on certain risk conditions

· Participate in cyber threat hunts in support of the global cyber operations function

· Assist with forensics investigations.

· Participate in the creation, modification and maintenance of all Cyber Monitoring policies and procedures

· Keep abreast of cyber security trends and the emerging threat landscape in general and as it relates to the customer

· Deliver timely and detailed documentation related to any incident including the findings, review and follow-up activities

· Follow documented processes and procedures is critical.

.