Level 1 analyst

Alliant Cybersecurity is seeking an experienced Level 1 analyst based in Hyderabad to help expand its Cybersecurity and Risk Advisory practice. This position primarily supports US-based customers and requires flexibility to work during US business hours.

Responsibilities

Operational security monitoring, including reviewing security alerts, conducting triage analysis of related security events, making true/false positive decisions, making escalation decisions, and making initial severity determinations; Managing and administering a SIEM and developing reports and other capabilities to support client needs; Identifying data sources and analytics for inclusion into SIEM; Conducting trending analysis of security alerts and events to identify patterns indicative of new unauthorized activity; Developing new signatures and correlated searches based on a variety of requirements; Identifying log and event sources including Active Directory event logs, routers, switches, firewalls, PCAP/flow data, DNS, audit and authentication logs, VPN, IDS, and other sensor tools; Making recommendations on new threat feeds and tools to evolve automated threat detection and support computer forensic and historical investigations; Providing Cybersecurity and Threat Analyst services to support active information security incidents and events from the Logging and Event Management solution; Coordinating with the ISMS core team to support ISMS activities and implementation strategies

Requirements

Knowledge of security monitoring technologies and core security principles; Direct experience with any SIEM or log aggregation system; Ability to review captured network traffic and compare it against the contents of a security alert; Experience and familiarity with IT management products and services; Experience analyzing Firewall, IDS, IPS, Web Proxy, Anti-Virus and SMTP data for security-related concerns; Skilled at using multiple operating systems; Ability to suggest technical solutions to complicated problems; Bachelor's degree in computer science, engineering, or other related disciplines; Minimum 2 years of SOC experience; Knowledge in Computer Forensics, Reverse Engineering, IDS/SIEM/Log Management, Threat Intelligence, Malware Analysis, EDR & Incident Response, and Vulnerability Management; Rigorous process adherence and attention to detail; Strong time management and multitasking abilities; Information security mindset; Team leadership capabilities; Excellent analytical and problem-solving skills; Outstanding communication and documentation abilities; Autonomous and self-organized; Experience in tactical coordination during incidents

Nice to have

Scripting skills in any common language (Python, Perl, Bash or PowerShell); Professional security certifications