Team Lead- Threat Analyst

Team: MDR and Security Operations

Location: India

Commitment: Permanent

Workplace Type: remote

What you will do

• Maintain supervision over operational tasks and provide day-to-day oversight for threat analysts 

• Oversee analysts in their investigation and response  

• Activities when security incidents arise to determine possible root cause and resolution  

• Effectively communicate information to stakeholders of all levels 

• Demonstrate experience in network and host-based intrusion analysis, incident response processes and procedures, digital forensics and/or handling malware 

• Acting as a lead throughout incident scenarios and provide subject matter expertise in cybersecurity incident response· 

• Successfully executing incident handling procedures as well as direct response to cyber security incidents 

• Maintaining current knowledge and recognition of attacker tools, tactics, and procedures to produce indicators of compromise (IOCs) that can be utilized during active and future investigations 

• Assessing cyber threat intelligence/open source intelligence and operationalizing that information 

• Demonstrating real-world, hands-on experience dealing with sophisticated malware and dynamic cyber threat actors 

• Identifying current and emerging threats and application of such research 

What you will bring

• 5+ years of experience within a cybersecurity environment; experience in a leadership role is preferred 

• Bachelor's in information technology, Computer Science, or a related field; or relevant, commensurate work experience 

• Experience in a security operations center, or similar environment, and identifying indications of compromise or attack and responding to incidents 

• Endpoint and network security experience required; IDS, IPS, EDR, ATP, Malware defenses and monitoring experience 

• Threat hunting experience preferred 

• Knowledge of common adversary tactics and techniques, e.g., obfuscation, persistence, defense evasion, etc. 

• Knowledge of Mitre ATT&CK framework preferred 

• Working knowledge of incident response procedures 

• Experience with SQL query construction preferred 

• Experience with OSQuery is a plus 

• Experience administering and supporting Windows OS (both workstations and server) and one of the following: Apple or Linux-based operating systems (e.g. XP, Windows 7, 2003, 2008, OS X) 

• Fundamental understanding of network traffic analysis including TCP/IP, routing, switching, protocols, etc.