Security Analyst Graduate Experience Jobs in Mumbai

ServiceDesk L1 & L2: Accept incidents/requests. Log incident/request tickets in IT service desk tool. Tickets to be recorded with correct category, severity, description, and workplace user information as per the predefined matrix. Assign incidents/requests to the appropriate technical resolver group and categorize them into the appropriate severity or priority group. Route incidents to vendors for issues pertaining to DC, Network, security, and application support services. End-user workplace tickets to be managed by Customer's end-user support vendor. Follow up with Customer's technical team for incident/request status and manage notifications, including necessary escalations. Escalate tickets that have breached service levels. Log calls with Customers vendors and coordinate for hardware, firmware, and OEM-related calls for assets listed in Service Baselines (pertaining to DC/DR, network, security, and application support services scope). Vendor coordination, handling functional escalation from helpdesk executives. Remote support to Customers end-users by remote device management.

Local candidates of Mumbai, Maharashtra will be given first preferenceOffice work- work from Officeg) working hour- Mon to Fri. (Saturday Alternate- holiday)Role and Responsibility: Identify potential customers in the Pharma /BFSI /Manufacturing/Healthcare other industries along with the OEMs and build strong relationships with key decision-makers in the OEM and customers. Conduct market research and analysis to identify new business opportunities and stay updated with industry trends and competitors and build repo with CISOs. Deliver product presentations and demonstrations to prospective clients, highlighting the features and benefits of our cybersecurity solutions. Collaborate with the marketing team to develop sales collateral, including presentations, case studies, and proposals as per joint go to strategy with the OEMs. Manage the complete sales cycle, from lead generation to deal closure, ensuring timely follow-ups and effective pipeline management along with the OEMs. Negotiate contracts and pricing agreements with customers, while ensuring profitability and customer satisfaction. Provide regular updates and interlock with the Account management and SE team of focused OEM along with the senior management team. Stay updated with the latest advancements in the cybersecurity industry and continuously enhance product knowledge along with key OEM certifications. Collaborate cross-functionally with Sales, Marketing, and Product teams of OEMs to drive joint initiatives and go-to- market strategies for Galaxy and OEM.Achieverevenuecommitments,participateinQBRs,andmeasureperformanceagainstmutuallydetermined business metrics and partnership scorecards aligned with focused OEMs

In this role, as part of the global Data Protection & Response Team, you will: Responsible for all operational aspects of the GE Healthcare Insider Threat platform. Lead design and deployment of solution, manage data ingestion, implementing new functionality to meet business requirements. Work collaboratively with stakeholders (and the Insider Threat Leader) to support data ingestion, data modelling, playbook/policy design and production deployment for operational teams. Responsible for enabling and maintenance of all data sources and feeds to support the operational requirements of platform and downstream needs. Perform Hybrid work assisting Insider Analytics and associated functions around Data Loss Prevention. Provide technology support, maintenance of application functionality and integrations. Triage production issues, identify root cause and corrective actions. Dive into crisis situations and Production issues, trouble-shoot, engage stakeholders and own problem resolution. Manage service parameters around operational incidents and SLAs in partnership with platform service provider/vendors. Responsible for policy and content development on the platform to support Insider Threat team needs. Implement innovative ways of identifying threats to data using the platform and ensure aligned to industry best practices. Collect, monitor and analyze data produced by the tools to discover and discern trends, threats, and security risks associated with improper use of GE data. Ensure compliance with all regional legal requirements globally. Support tenant, tools, end-point and data migration efforts aligned with business spin-off. Manage stakeholder communication, balance of program/business priorities and communicate progress towards business objectives. Track outcomes and stakeholders satisfaction levels through established metrics against service level. Ensure lessons learned are collected and implemented.

Job Responsibilities:- Worked on Snypr which is a Big data based Security analytics tool which includes SIEM and UEBA and which detects advanced cyber threats. It combines log management. Worked on SIEM Implementation includes Incident management, SIEMAdministration/Installation/Configuration, Use case management, Threat models and Policy Configurations, Correlation rules, Data source onboarding, Log analysis and events monitoring, Dashboard Designing, Reports and Workflows. Handling Incidents like Phishing, UEBA, Networks, Endpoints, Applications, Banks Proprietary App Malwares, APTs etc. with critical, medium and high severity in Splunk Enterprise Security.Perform weekly Threat Hunting Exercises via Splunk by analyzing the logs (APIs, WAF, f/w, proxy, av, ad, endpoint, etc.) and prepare an executive summary report with all the informations IOCs,MITRE ATTACK TTPs. Setup Secure Syslog (TLS) on the RHEL7 platform. Setup Firewall Rules on RHEL7 platform. Knowledge on WAF. Strong Understanding of Network Security terminologies like DLP, IDS, IPS, CASB application security, endpoint security, data protection. Knowledge on networking concepts, protocols and networking devices. Knowledge on Vulnerability Management Knowledge on Splunk.Certification :-CEH V9 Splunk Enterprise Certified Architect CompTIA security certified

Hands-on Experience is performing Web, mobile, network, and cloud security assessments.Hands-on experience and understanding of advance Pen testing methodologiesHands-on experience and understanding of Vulnerability assessment and penetration testingShould have a good understanding of attack surface, threat modelling, OWASP top 10, ASVS, SourceCode reviews.Familiar with both automated and manual testing of applicationsHands-on knowledge of Tools: Burp Suite, Kali Linux, Metasploit, NMAP, Nessus, Nexpose, Wireshark,sqlmap, etc.Knowledge of Programming (Java, Python, Golang).Should have a good report writing skill and assist the team in creating reports.Develop and maintain security testing plans for clientsCritical thinker and problem solverShould be able to work independently and communicate with clients to understand their requirementsShould have the ability to present security reports to clientsAbilities:Good in written and spoken English.Must be able to communicate with the client team