Overall Objectives of Job

A Level 2 – Incident Response participates in a 24/7 operation that supports monitoring and is directly responsible for responding to security events. He provides a technical escalation point during Security Incidents, establishing extent of threat, business impacts and then advising and performing the most suitable course of action to contain and remedy the incident. A Level 2 Specialist maintains a good knowledge of the threat landscape, helps enhance current techniques and provides support in the identification of new methods of detecting threats. He performs detailed analysis of security events, using analytical skills and advanced knowledge of IT security and network threats. Expect to have basic cloud knowledge, working with API’s, Basic and Hands-on experience on Akamai cloud platform.

Duties and Responsibilities

• Alert handling: Analyze and tune security alerts and interpret security events which may led to incidents
• Incident Response activities: Identify, investigate and respond to potential security incidents in order to minimize the operational and organizational impact
•  Policy fine-tuning and maintain the current policies: Actively pursue abnormal activity on assets and new attack trends and fine tune the policies accordingly in order to tighten the security.
• Threat Intelligence: Leverage various threat intelligence sources and capabilities to enable intelligence driven response
• Application Onboarding : Onboard applications based on the customer requirement and ensure business continuity and service availability
• • API: knowledge in API’s.
  • Experience with cloud WAF would be an advantage. Like Akamai, Imperva.
  • Knowledge in Scripting. Like Python, Shell, etc.
  Knowledge in terraform or any automation software would be an added advantage.
• Forensics: Perform forensic analysis on memory, disk, and other system and network artifacts to identify indicators of compromise.
• Identify Gaps: Investigate and document gaps in controls, event data, and work with internal teams to resolve
• Process Improvement: Execute, develop and document Incident Handling Guides and processes.

Qualification, Experience, Technical and Functional Skills

At least 4 to 5 years of experience handling Network Security , Incident Response , knowledge and Hands on experience on WAF or any Reverse proxy Layer 7 security appliance. Other skill sets include;

• OWASP top 10
• Knowledge of networking protocols such as HTTP, SSL, FTP, DNS etc. and good idea about OSI layer and packet flow
• Knowledge of Syslog and SNMP monitoring tools
• Basic Linux knowledge
• Basic knowledge in cloud technologies
• ITIL knowledge and service management skills would be a plus
• Basic understanding and Knowledge on Automation tools and software.