Senior Information Security Operations Analyst
- NCR Corporation
- 4 - 9 years
- Noida, Gurugram
- 27 days ago
- Email to a friend
- Report this job
Job Description
Information Security Engineer III
This role is part of NCR s Global Information Security team. This team is responsible for developing and implementing NCR s corporate information security program. The primary goal of the program is to protect the confidentiality, integrity, and availability of information resources. Key information security functions and activities include architecture and design for NCR information security controls, developing and enforcing policies and standards, security awareness training, risk management, assessment, and testing, monitoring and metrics, incident management, and threat and vulnerability management.
The Information Security Engineer III is responsible for day to day security operations, including responding to routine and high severity security incidents and managing identified vulnerabilities. The role works closely with incident responders, incident management teams, leadership, and other stakeholders to ensure incidents are contained, eradicated, remediated, and followed by post incident reviews in accordance with corporate policies.
The role also includes proactive threat hunting, leveraging SIEM, EDR, and cloud security telemetry to identify advanced or emerging threats using frameworks such as MITRE ATT&CK, and applying threat intelligence to enhance detections and support risk based prioritization.
The Information Security Engineer III collaborates with vulnerability coordinators and remediation teams to ensure vulnerabilities are addressed through patching, configuration changes, or compensating controls. The role participates in weekly operational status calls, contributes to continuous improvement initiatives aligned with the Office of the CISO, and is part of an on call rotation, requiring availability during off hours, weekends, and response to ad hoc security incidents.
Key Responsibilities
- As an active member of the team, monitor and respond to security events on a 24x7 basis .
- Lead post incident/postmortem exercises with a focus on identifying deficiencies that require additional attention.
- Triage, respond to, and escalate security incidents as per defined procedures.
- Triage, respond to, and escalate Zero Day and High Severity vulnerabilities .
- Coordinate remediation activities for Zero Day and High Severity vulnerabilities.
- Leverage automation and orchestration solutions to automate repetitive operational tasks.
- Work alongside other security team members to hunt for and identify security issues originating from the network, including third party environments .
- Coordinate incident response activities across multiple independently managed environments and security teams.
- Leverage knowledge across multiple security disciplines, including Windows, Unix/Linux, DLP, endpoint controls, public cloud, and networking , to deliver solutions in a complex, heterogeneous environment.
- Utilize multiple security and threat intelligence tools and resources to understand and assess threats.
- Analyze and respond to minor and major security incidents , including reported SPAM and phishing emails .
- Partner with the Detection Engineering team to improve tool usage and workflows, and with the Advanced Threats and Assessment team to mature monitoring and response capabilities.
- Support 24x7 security operations , including on call responsibilities as required.
- Perform other duties as assigned.
Skills and Qualifications
- Strong knowledge of networks, backend systems, operating systems, applications, and web services , and how they interact from a security and services perspective.
- 4+ years of experience in Senior Incident Response and/or Vulnerability Management functions.
- Ability to apply strong analytical expertise and critical thinking to security incidents and vulnerabilities.
- Ability to assimilate, understand, and effectively utilize various security technologies and tools.
- Proven ability to collaborate within a geographically distributed team of Incident Response Analysts and vulnerability remediation teams.
- Knowledge of relevant information security and incident response frameworks , including MITRE ATT&CK and CVSS scoring systems .
- Hands on experience in threat hunting and applying threat intelligence to enhance incident response and vulnerability prioritization.
- Strong communication skills with the ability to work effectively in a collaborative team environment .
- Strong attention to detail and documentation discipline.
- Ability to deal with ambiguity and translate high level objectives into detailed, actionable tasks.
- Ability to prioritize work across multiple, simultaneous assignments in a fast paced environment.
- Strong willingness and ability to learn new tools, technologies, and processes .
- Experience documenting business processes and/or technical procedures is preferred.
- Experience working with enterprise security platforms including CrowdStrike, Splunk, Zscaler, Cisco XDR, Microsoft Defender , Proofpoint and automation/orchestration tools is considered a strong plus.
Certifications (Preferred)
- Information Security Certifications (Preferred):
- CISSP, CISM, GCIH, GCIA, GCED, CEH, Security+, or equivalent
-
- Public Cloud Security Certifications (Preferred):
- AWS Certified Security Specialty
- Azure Security Engineer (AZ 500 / SC 200)
- Google Cloud Professional Security Engineer
- CCSP
-
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT & Information Security - OtherRole: IT & Information Security - OtherEmployement Type: Full timeContact Details:
Company: NCR CorporationLocation(s): Noida, Gurugram+ View Contact
Keyskills: Unix Backend Automation Analytical Information security Windows Security operations Risk management Operations Recruitment
Fraud Alert to job seekers!
₹ Not Disclosed
NCR Corporation
Atleos (NYSE: NATL) is a leader in expanding self-service financial access, with industry-leading ATM expertise and experience, unrivalled operational scale including the largest independently-owned ATM network, always-on global services and constant innovation. Atleos improves operational efficienc...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in