SOC (Splunk) Principal Analyst | On-site, Bangalore, India at Optiv

Optiv is a market-leading provider of cyber security solutions with a rich and successful history of serving more than 12,000 clients across various industries. The company is committed to championing Diversity, Equality, and Inclusion through its Affinity groups and offers work/life balance, professional training resources, volunteer opportunities, and the ability to work remotely. We are looking for a Principal Analyst to join our team in Bangalore, India. The ideal candidate will provide deep-level analysis for client investigations utilizing customer-provided data sources, audit, and monitoring tools at both the government and enterprise levels. The role involves operating independently in a geographically dispersed team, performing security monitoring and incident response activities, detecting incidents through proactive “hunting,” and developing new, repeatable methods for finding malicious activity across the networks. The candidate will also be responsible for presenting technical topics to technical and non-technical audiences, engaging with and mentoring other team members, and working with other teams on major engineering and architecture initiatives. If you are seeking a culture that supports growth, fosters success, and moves the industry forward, find your place at Optiv! Responsibilities: - Provide deep-level analysis for client investigations utilizing customer-provided data sources, audit, and monitoring tools at both the government and enterprise levels - Operate independently in a geographically dispersed team, while maintaining situational awareness and keeping the team up to date - Perform security monitoring and incident response activities across the networks, leveraging a variety of tools and techniques - Detect incidents through proactive “hunting” across security-relevant data sets - Thoroughly document incident response analysis activities - Review investigations conducted by more junior analysts to ensure quality standards are met - Develop new, repeatable methods for finding malicious activity across the networks - Provide recommendations to enhance detection and protection capabilities - Regularly present technical topics to technical and non-technical audiences - Develop and follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of information security incidents - Prioritize multiple high-priority tasks and formulate responses/recommendations to customers and team members in a fast-paced environment - Provide assistance to other security teams - Continually develop new technical skills and push overall team capabilities forward - Engage with and mentor other team members - Work with other teams on major engineering and architecture initiatives - Be innovative with their understanding of attack methodologies, malware analysis, malicious toolkits, and how those may manifest within various security technologies - Advanced proactive threat hunting - Understand advanced adversary emulation concepts - Advanced use case design for insider threat, operational, threat detection and response - Review of defensive and detective controls to reduce client attack surface

SOC (Splunk) Principal Analyst | On-site, Bangalore, India

Responsibilities

Skills wanted:

Language(s) required:

About Optiv:

mission:

www.optiv.com/

Admin access needed