Rackspace

Rackspace Cyber Defence (Public Cloud)Security Operations Analyst (India)Context Job profiles are to be used in conjunction with documented ‘Public Cloud Security Practice Job Descriptions’ and are designed to provide additional details, which may not be stipulated in the job description. Role NameSecOps Analyst LocationIND-GurgaonExperience - 3-10yearsEligible for Remote WorkNoWork PatternRotational Shift (24x7, 4 on 2 off)About Rackspace Cyber DefenceRackspace Cyber Defence is our next generation cyber defence and security operations capability that builds on 20+ years of securing customer environments to deliver proactive, risk-based, threat-informed and intelligence driven security services. Our purpose is to enable our customers to defend against the evolving threat landscape across on-premises, private cloud, public cloud and multi-cloud workloads.Our goal is to go beyond traditional security controls to deliver cloud-native, DevOps-centric and fully integrated 24x7x365 cyber defence capabilities that deliver a proactive, threat-informed, risk-based, intelligence-driven approach to detecting and responding to threats.Our mission is to help our customers:·       Proactively detect and respond to cyber-attacks – 24x7x365.·       Defend against new and emerging risks that impact their business.·       Reduce their attack surface across private cloud, hybrid cloud, public cloud, and multi-cloud environments.·       Reduce their exposure to risks that impact their identity and brand.·       Develop operational resilience.·       Maintain compliance with legal, regulatory and compliance obligations. What we’re looking forTo support our continued success and deliver a Fanatical Experience™ to our customers, Rackspace Cyber Defence is looking for an Indian based Security Operations Analyst (L3) to support Rackspace’s strategic customers. This role is particularly well-suited to a self-starting, experienced and motivated Sr. Sec Ops Analyst, who has a proven record of accomplishment in the cloud security monitoring and incident detection domain.As a Security Operations Analyst(L3), you will be responsible for detecting, analysing, and responding to threats posed across customer on-premises, private cloud, public cloud, and multi-cloud environments.The primary focus will be on triaging alerts and events (incident detection), which may indicate malicious activity, and determining if threats are real or not. You will also be required to liaise closely with the customer’s key stakeholders, which may include incident response and disaster recovery teams as well as information security. Key Accountabilities·       Should have experience of 10 years in SOC.·       Ensure the Customer’s operational and production environment remains secure at all the times and any threats are raised and addressed in a timely manner. Critical incident handling &amp; closure.Escalation management and handling escalations from L2 Analysts.Proactive discovery of threats based on MITRE ATT&amp;CK framework.Deep investigation and analysis of critical security incidents.Post breach forensic incident analysis reporting.Review the weekly and monthly reports.Review new use cases created by L2 and implement in cloud-native SIEM (Security Information and Event Management).Assist with customer onboarding (such as use case development, identifying data sources, configuring data connectors etc)Advanced threat hunting.Develop custom dashboards and reporting templates.Develop complex to customer specific use cases.Advanced platform administration.Solution recommendation for issues.Co-ordinate with vendor for issue resolution.Basic and intermediate playbook and workflow enhancement.Maintain close working relationships with relevant teams and individual key stakeholders, such as incident response and disaster recovery teams as well as information security etc.Develop the custom parsers for the incident and alert enrichment.Problem specific playbook and workflow creation and enhancements·       Required to work flexible timings.Skills &amp; Experience·       Existing experience as a Security Operations Analyst, or equivalent.·       Experience of working in large scale, public cloud environments and with using cloud native security monitoring tools such as: -o   Microsoft Sentinelo   Microsoft 365 Defendero   Microsoft Defender for Cloudo   Endpoint Detection &amp; Response (EDR) tools such as Crowdstrike, Microsoft Defender for Endpoint.o   Firewalls and network security tools such as Palo Alto, Fortinet, Juniper, and Cisco.o   Web Application Firewall (WAF) tools such as Cloudflare, Akamai and Azure WAF.o   Email Security tools such as Proofpoint, Mimecast and Microsoft Defender for Officeo   Data Loss Prevention (DLP) tools such as Microsoft Purview, McAfee and Symanteco   Nice to have skills/experience includes:§  Google Cloud Platform (GCP) security tools such as Chronicle and Security Command Centre§  Amazon Web Services (AWS) security tools such as Security Hub, AWS Guard Duty, AWS Macie, AWS Config and AWS CloudTrail·       Experience of analysing malware and email headers, and has skills in network security, intrusion detection and prevention systems; operating systems; risk identification and analysis; threat identification and analysis and log analysis. ·       Experience of security controls, such as network access controls; identity, authentication, and access management controls (IAAM); and intrusion detection and prevention controls. ·       Knowledge of security standards (good practice) such as NIST, ISO27001, CIS (Center for Internet Security), OWASP and Cloud Controls Matrix (CCM) etc.·       Experience with scripting and coding with languages such as Terraform, python, javascript, golang, bash and/or powershell.·       Experience with DevOps practices and tools such as Backlogs, Repo’s, Pipelines, Artifacts, CI/CD, JIRA, Azure DevOps, CircleCI, GitHub Actions, Ansible and/or Jenkins.·       Computer science, engineering, or information technology related degree (although not a strict requirement) ·       Holds one, or more, of the following certificates (or equivalent): -o   Certified Information Security Systems Professional (CISSP)o   Microsoft Certified: Azure Security Engineer Associate (AZ500)o   Microsoft Certified: Security Operations Analyst Associate (SC-200)o   CREST Practitioner Intrusion Analyst (CPIA)o   CREST Registered Intrusion Analyst (CRIA)o   CREST Certified Network Intrusion Analyst (CCNIA)o   Systems Security Certified Practitioner (SSCP)o   Certified Cloud Security Professional (CCSP)o   GIAC Certified Incident Handler (GCIH)o   GIAC Security Operations Certified (GSOC)·       A highly self-motivated and proactive individual who wants to learn and grow and has an attention to detail.·       A great analyser, trouble-shooter and problem solver who understands security operations, programming languages and security architecture.·       Highly organised and detail oriented. Ability to prioritise, multitask and work under pressure.·       An individual who shows a willingness to go above and beyond in delighting the customer.·       A good communicator who can explain security concepts to both technical and non-technical audiences.About Rackspace TechnologyWe are the Multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data, and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes, and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future. More about Rackspace TechnologyThough we are all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, colour, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know. About Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

India

Gurugram

Security Operations Analyst

City

The Info Security Tech Sr Analyst is an intermediate level position responsible for leading efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.Responsibilities:<ul><li>The analyst performs monitoring, research, assessment and analysis of Digital Fraud Attacks leveraging various Security Event Monitoring platforms including Web Threat Detection, Real Time Fraud Risk Assessment, Big Data and Digital Application Monitoring tools (ArcSight, Splunk, SAS, Teradata, and enterprise real time fraud detection tools.). Previous experience in cyber security operations or incident response is required.</li><li>Follow pre-defined actions to handle BAU and High severity issues including escalating to other support groups.</li><li>Execute daily ad hoc tasks or lead small projects as needed.</li><li>Create and maintain operational reports for Key Performance Indicators and weekly and monthly metrics. </li><li>Perform assessment as well as troubleshooting to help isolate technical issues with the integration of fraud monitoring technologies</li><li>Participate in daily and ad hoc conference calls to manage quality assurance and documentation related tasks.</li><li>Identify areas for tuning use cases to enhance monitoring value.</li><li>Engage with Fraud Policy, Operations, Strategy and other teams for early detection, prevention and mitigation of detected fraudulent activities.</li></ul>Job Skills/Qualifications:<ul><li>Ability to communicate effectively both orally and in writing.</li><li>Strong knowledge of current Cyber Fraud trends including common Account Takeover techniques and banking malware.</li><li>Deep understanding of Intrusion Detection analysis (TCP/IP, packet level analysis) as well as Application Layer Protocols (HTTP). Advanced understanding of various operating systems (Windows/UNIX), and web technologies (focusing on Internet security). </li><li>Knowledge of cutting-edge threats and technologies affecting Web Applications. </li><li>Experience with Big Data Technologies, ETL Tools, Data Warehouse and Business Intelligence technologies is preferred. </li><li>Experience with any scripting language and Splunk is a plus.</li><li>Experience with vulnerability assessment as well as penetration testing or forensic analysis fields is a plus.</li><li>Certifications from EC-Council, GIAC, (ISC)² are preferred [CISSP, CEH, GCIA, GWAPT and CFE].</li></ul>Qualifications:<ul><li>5-8 years of relevant experience</li><li>Consistently demonstrates clear and concise written and verbal communication</li><li>Proven influencing and relationship management skills</li><li>Proven analytical skills</li></ul>Education:<ul><li>Bachelor’s degree/University degree or equivalent experience</li></ul>This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.#LI-Hybrid-------------------------------------------------Job Family Group: Technology-------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Singapore

AVP - SOC Cyber Fraud Analyst (Hybrid)

KPMG New Zealand

Advisory is an exciting and challenging environment, which enables our global specialist knowledge to offer risk consulting, management consulting, and transactions and restructuring services to our clients. Assignments are often managed on a multi-disciplinary basis utilising the skills and experience of advisors from more than one team or service area. Our Forensic Consulting team primarily assists clients to prevent, detect and respond to fraud, bribery, corruption, money laundering, misconduct and other financial crime issues as well as resolving commercial disputes.<h3>The opportunity: </h3><ul><ul><li>Due to increasing demand for our services, we are looking for a Senior Advisor and/or Assistant Manager to support our Forensic team across a range of financial crime engagements</li><li>This role requires a blend of analytical and investigative skills built on compliance/accounting fundamentals and will see you being asked to advise on complex and sometimes time sensitive matters</li><li>You'll be exposed to an exciting variety of engagements across anti-money Laundering, sanctions, fraud, bribery and corruption and commercial disputes, as well as get the chance to collaborate with different teams and sectors across our Advisory division and the broader firm</li><li>In addition to bringing your own experience and insight, you will have the opportunity to broaden your expertise and profile through a range of interesting projects and with a wide set of clients</li></ul></ul><h3>Day to day you will:</h3><ul><ul><li>Utilise your knowledge of the financial crime regulatory environment to support the development of solutions for our clients</li><li>Interpret and analyse company accounts, financial information, policies, procedures and controls</li><li>Prepare high quality reports and documents used by Management, Boards, legal advisors and sometimes in legal proceedings</li><li>Monitor new regulatory and industry developments to deliver targeted messages relevant to our clients</li><li>Add value to cross service line financial services proposals to help ensure that the risk and compliance aspects are covered</li><li>Identify and proactively respond to new business opportunities including cross-functional opportunities to provide added value to clients</li><li>Build the reputation of KPMG through the quality of your work, expertise and judgement as well as innovative approaches</li><li>Work as part of a close-knit, high energy team, which thrives on the variety of work</li></ul></ul><h3>What you'll bring to our team:</h3><ul><ul><li>Consulting experience and/or financial services sector experience is preferred; a combination of both is ideal;</li><li>Anti-money laundering and/or Sanctions work experience plus knowledge of other areas of financial crime (i.e. bribery and corruption, fraud, disputes) would also be beneficial</li><li>An analytical mindset, attention to detail and an ability to challenge data, information and explanations provided</li><li>Strong written and verbal communication skills</li><li>Ability to work at pace whilst delivering pragmatic and high quality outcomes</li><li>Strong relationship building skills with clients and with members of the project team </li><li>An ability to work in a multi-disciplinary, client-facing team</li><li>Positive and flexible attitude and an enthusiasm to embrace new challenges and growth opportunities to gain experience</li><li>A relevant tertiary qualification</li><li>Experience of New Zealand compliance requirements would be beneficial.</li></ul></ul>Life at KPMGKPMG values diversity in the workforce and we encourage candidates from diverse backgrounds to apply for roles, including individuals with a disability, additional mental health needs, chronic health conditions or who identify as neurodivergent. For disabled and neurodiverse candidates, if you encounter accessibility barriers or if you have access needs and require support to participate equitably in the recruitment process, please phone Georgia Yenge on 04 816 4598 or email KPMGAccessibilityNetwork@kpmg.co.nzWe offer rewarding careers to talented individuals and a holistic range of benefits to support your life balance, whatever your circumstance. We want you to do Work That Matters, Thrive and Grow and know that you Belong here with us, at KPMG. As a KPMG employee, we will offer you: —  Access to the firm's annual incentive scheme—  Opportunities for local and international secondments—  Hybrid working across a mix of office, client and home hubs to recognise that people have individual circumstances and preferences when it comes to where and how they work— A technology starter pack to get your 'home hub' set up— The ability to work from overseas and extend time connecting with friends and family outside New Zealand—  Flexible leave options, including the ability to purchase additional annual leave.—  Gender-neutral support for all stages of the parental journey, including access to 18 weeks of fully paid parental leave for all new parents —   A paid professional association membership of your choice—   Digital accreditations through our partnership with Microsoft, LinkedIn Learning, with bespoke learning pathways for all employees—   A wide-range of special offers and discounts on insurances, banking services, and lifestyle goods and services.—   The support, allyship and opportunity to join our many Inclusion, Diversity and Equity Affinity networks, including the Kiwa, Pride, Ethnicity, Accessibility and Wahine groups—  The opportunity to participate in Green Team activities, as we work toward reducing the firm’s environmental footprint and become carbon zero by 2030—  An invitation to join your local Social club and enjoy events aimed at bringing people together for social, sporting, cultural, family and fundraising activities—  Paid time off for volunteering and involvement in citizenship activities—  An array of health and wellness benefits such as free flu vaccinations, subsidised sporting events, free confidential counselling services, additional 5 days of Wellbeing leave to support you and your family's overall health and wellness, access to our Wellbeing portal with an extensive range of advice and resources and much much more! We believe that diversity of background and experience strengthens relationships and delivers meaningful benefits to our people, clients and communities. Our goal is to be recognised as an employer of choice for all, irrespective of gender, ethnicity, generation, flexible work status, family circumstances, sexual orientation or disability. Further info can be found on our website We are a 2023 Circle Back Initiative Employer – we commit to respond to every applicant.

Auckland

Senior Advisor / Assistant Manager – Financial Crime

ION Group

The Role:The IT Security Analyst is a global role within the ION Markets Division. The role will support the division’s security strategy through the identification, mitigation and remediation of information security risks to the business. This role reports to the divisional CISO.As a member of the Markets’ IT Security Team, the successful candidate will be responsible for handling escalations from the Group-wide CSIRT Team, improving the security posture, vulnerability management/reporting through to remediation, ensuring security standards are upheld as well as providing input in to security control configuration and policies.  The Security Analyst’sother responsibilities include meeting KPI targets defined by management and performing various other duties assigned by the divisional CISO.We are looking for a hard-working, dedicated and motivated individual. Excellent communication skills are a must and the role holder will be expected to cultivate working relationships with other teams and colleagues of varying technical ability. The role would suit a technically strong candidate looking to drive forward career progression within a dedicated security team. Ideally the candidate will have come from related security and systems administration roles, focusing on workstation, server and network technologies.<h3>Key Responsibilities</h3><ul><ul><li>This role may require some overnight, weekend and on-call activities.</li><li>The primary responsibilities of this role are to:</li><li>Protect and defend: identify, analyze and mitigate threats to IT systems and/or networks.</li><li>Use defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or might occur within the network to protect information, information systems, and networks from threats.</li><li>Respond to security alerts to mitigate immediate and potential threats. Use mitigation, preparedness, and response and recovery approaches, as needed, to maintain information security and minimize impacts.</li><li>Conduct assessments of threats and vulnerabilities; determine deviations from acceptable configurations, enterprise or local policy; assess the level of risk; and develop and/or recommend appropriate mitigation countermeasures.</li><li>Operate and maintain: configure, tune, maintain and operate key security controls, technologies, and other risk mitigations</li><li>As a member of the Security team, it is expected that the person in this role will:</li><li>Execute ongoing, operational business-as-usual (BAU) tasks to meet management-defined KPIs and SLAs, and deliver security projects in line with management-defined priorities and deadlines</li><li>Stay current with the latest security news, threats, intelligence, tactics, techniques, and vulnerabilities. Research and analyze new threats and vulnerabilities to determine exposure.</li><li>Perform threat hunting and review, triage, investigate and escalate security alerts raised by the Group-Wide SOC team, security tools, technologies, and services (e.g. endpoint security, network security, DLP, SIEM, etc.)</li><li>Assist and/or lead efforts to isolate, contain, respond to, and recover from security incidents </li><li>Identify, review, prioritize, plan, coordinate, and follow-up on the remediation of vulnerabilities</li><li>Configure, customize, tune, manage, troubleshoot, and maintain to ensure effective and efficient operation of security technologies, such as SIEM &amp; endpoint security, intrusion detection/prevention systems, etc. This may also include scripting, automation, and orchestration across various platforms.</li><li>Define, document, and follow approved processes for all the responsibilities included in this job description. Create and maintain documentation for systems, including design and operation.</li><li>Review systems, configurations, and process to ensure and report on compliance with ION policy, client requirements, audit controls, regulations, and industry best practices. Provide best practice security recommendations to IT and other teams within ION, based on review results.</li><li>Respond to information security-related inquiries and requests.</li></ul></ul><h3>Required Skills, Experience and Qualifications</h3><ul><ul><li>Degree/diploma/certifications in a technology-related field and/or relevant working experience; highly desired certifications include:</li><li>PenTest+, Security+, OSCP, CCSP, CEH, GCIH, GMON</li><li>3+ years' experience in IT Security and/or IT</li><li>Must have fundamental programming/scripting capabilities (e.g. python, powershell, bash, etc.)</li><li>Must have in-depth understanding of operating systems (Windows/Linux)</li><li>The following general characteristics are required:</li><li>A team player with the ability to work independently and unsupervised </li><li>Ability to own delegated tasks and see them through to completion</li><li>Ability to manage time and prioritize work to maximize productivity</li><li>Excellent communication skills (both written and verbal)</li><li>Exceptional attention to detail and quality</li><li>Excellent problem-solving techniques and trouble analysis skills</li><li>The candidate should have a good knowledge of:</li><li>Endpoint security concepts, controls, and best practices for Servers (e.g. Windows and Linux) </li><li>General IT networking concepts, protocols, standards and network security concepts, controls, and best practices</li><li>Cryptography fundamentals and data security controls and best practices</li><li>Forensic investigation techniques</li><li>Prior experience deploying, configuring, managing, and/or operating security technologies is preferred, such as endpoint security (e.g. AV/EPP/EDR), SIEM, DLP, SWG, CASB, UEBA, IDS, IPS, firewalls, IAM/PIM/PAM, vulnerability management, MDM, etc.</li></ul></ul>About usWe’re a diverse group of visionary innovators who provide trading and workflow automation software, high-value analytics, and strategic consulting to corporations, central banks, financial institutions, and governments. Founded in 1999, we’ve achieved tremendous growth by bringing together some of the best and most successful financial technology companies in the world.          • Over 2,000 of the world’s leading corporations, including 50% of the Fortune 500 and 30% of the world’s central banks, trust ION solutions to manage their cash, in-house banking, commodity supply chain, trading and risk.          • Over 800 of the world’s leading banks and broker-dealers use our electronic trading platforms to operate the world’s financial market infrastructure.ION is a rapidly expanding and dynamic group with 13,000 employees and offices in more than 40 cities around the globe, Our ever-expanding global footprint, cutting edge products, and over 40,000 customers worldwide provide an unparalleled career experience for those who share our vision.

London

IT Security Analyst

The Role: - The Security Operations Manager is a global, groupwide role in ION’s Security function and will support the Group Security strategy and operational excellence through the identification, mitigation, and remediation of information security risks to the business. This role reports to the Global Head of IT Security, who reports to the Global Chief Information Security Officer (CISO) As a member of the ION Security team, the successful candidate will be responsible for monitoring and tuning technical security controls to protect ION’s information technology (IT) systems and networks across the group and will help ION evolve its technical security posture to keep up with the ever-changing security landscape and emerging threats. This role may require shift work in the support of a 24x7 globally coordinated operation. The Security Operations Manager other responsibilities include oversight of the Security Operations Team, KPI targets defined by management and performing the various other duties assigned by Head of IT Security. We are looking for a hard-working, dedicated, and motivated individual. Excellent communication skills are a must, and the role holder will be expected to cultivate working relationships with other teams and colleagues of varying technical ability. The role would suit a technically strong candidate looking to drive forward career progression within a dedicated security team. The candidate must have significant experience working in a security operations team /SOC role, with the last 3+ years in a security management position.<h3>Key Responsibilities:</h3><ul><ul><li>Execute ongoing, operational business-as-usual (BAU) tasks to meet management - defined KPIs and SLAs, and deliver security projects in line with management-defined priorities and deadlines </li><li>Stay current with the latest security news, threats, intelligence, tactics, techniques, and vulnerabilities. Research and analyze new threats and vulnerabilities to determine exposure. </li><li>Perform threat hunting and review, triage, investigate and escalate security alerts raised by security tools, technologies, and services (e.g. endpoint security, network security, DLP, SIEM, reported phishing emails, etc.) </li><li>Assist and/or lead efforts to isolate, contain, respond to, and recover from security incidents </li><li>Identify, review, prioritize, plan, coordinate, and follow-up on the remediation of vulnerabilities</li><li>Configure, customize, tune, manage, troubleshoot, and maintain to ensure effective and efficient operation of security technologies, such as SIEM, endpoint security, secure web gateway, CASB, DLP, email security, intrusion detection/prevention systems, etc. This may also include scripting, automation, and orchestration across the various platforms </li><li>Define, document, and follow approved processes for all the responsibilities includes in this job description. Create and maintain documentation for systems, including design and operation</li><li>Review systems, configurations, and process to ensure and report on compliance with ION policy, client requirements, audit controls, regulations, and industry best practices. Provide best practice security recommendations to IT and other teams within ION, based on review results </li><li>Respond to information security-related inquiries and requests.</li></ul></ul><h3>Required Skills, Qualifications and Education:</h3><ul><ul><li>Degree/diploma/certifications in a technology-related field and/or relevant working experience; highly desired certifications include: PenTest+, Security+, OSCP, CCSP, CEH, GCIH, GMON or CISSP </li><li>7+ years' experience in information security with at least 3-5 years in a Security Operations Management role </li><li>Must have fundamental understanding of programming/scripting. The following general characteristics are required:</li><li>A team player with the ability to work independently and unsupervised. </li><li>Ability to own delegated tasks and see them through to completion </li><li>Ability to manage time and prioritize work to maximize productivity. </li><li>Excellent communication skills (both written and verbal) </li><li>Exceptional attention to detail and quality </li><li>Excellent problem-solving techniques and trouble analysis skills </li><li>The candidate should have a good knowledge of: </li><li>Endpoint security concepts, controls, and best practices for workstation (e.g. Windows and Mac) and server (e.g. Windows and Linux) operating systems </li><li>General IT networking concepts, protocols, standards and network security concepts, controls, and best practices </li><li>Cryptography fundamentals and data security controls and best practices </li><li>Forensic investigation techniques </li><li>Security standards/best practices and frameworks </li><li>Prior experience deploying, configuring, managing, and/or operating security technologies is preferred, such as endpoint security (e.g. AV/EPP/EDR), SIEM, DLP, SWG, CASB, UEBA, IDS, IPS, firewalls, IAM/PIM/PAM, vulnerability management, MDM, etc.</li></ul></ul>About ION: -ION is a successful next-generation global company. We are a leader in Financial Technology, Automation and Data. We’re a diverse group of visionary innovators who provide trading and workflow automation software, high-value analytics, and strategic consulting to corporations, central banks, financial institutions, and governments. More than 40% of the world’s largest companies use our solutions. Founded in 1999, we’ve achieved tremendous growth by bringing together some of the best and most successful financial technology companies in the world. With decades of industry experience and a track record of delivering mission-critical solutions, our global team is focused on building long-term partnerships with our customers so that we can help transform their business through continuous innovation. With a dynamic team of 7,000+ employees, 60+ global offices, and over 4,800 clients worldwide, ION provides an unparalleled experience for those who share our passion for growth and technology evolution.

Noida

SOC Manager

Apply to Forensic Cyber Security Jobs in companies remotely and near you. New Forensic Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Operations Analyst at Rackspace	Remote Full Time Forensic Analyst Incident Response
AVP - SOC Cyber Fraud Analyst (Hybrid) at City	Full Time Forensic Analyst Incident Response Windows
Senior Advisor / Assistant Manager – Financial Crime at KPMG New Zealand	Full Time Forensic Manager Consulting
IT Security Analyst at ION Group	Remote Full Time CISO Forensic Audit
SOC Manager at ION Group	Remote Full Time CISO Forensic Audit

Forensic Cyber Security Jobs

0 Forensic Cyber Security Jobs. Page 1 of 1

5 closed forensic cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Forensic Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Forensic Cyber Security Jobs

0 Forensic Cyber Security Jobs. Page 1 of 1

5 closed forensic cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Forensic Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter