About the role
Job Description:
Sony India Software Centre Information Security team is looking for an Information Security Analyst who will be responsible for design, development, and execution of large-scale Information Security initiatives. In this position, you are a passionate and talented information security professional with problem-solving abilities and coding/testing/tuning skills who can work in a fast-paced environment.
Key Responsibilities:
- Be part of team, protects and manages, security services for companies’ global security infrastructure.
- Knowledge of endpoint security solutions like McAfee, Symantec, CrowdStrike, or TrendMicro.
- Python scripting and command line interfaces knowledge is an added advantage.
- Implementation, development, and integration of endpoint security solutions like McAfee, Symantec, CrowdStrike, or TrendMicro.
- Engage in technical solutions based on use cases and business requirements.
- Experience on EDR upgrades and deployment
- Basic EDR event & log analysis.
- Experience in analysing and actioning on alerts from various endpoint, cloud security, Email, Network devices such as IDS/IPS.
- Thorough understanding of Threat detection analysis.
- Good understanding of policy configuration for McAfee, Symantec, CrowdStrike, or TrendMicro.
- Manage, configure, administer, tune, and maintain McAfee, Symantec, CrowdStrike, or TrendMicro Tools.
- Knowledge of network-based information security technologies: firewalls, IDS, IPS, DLP
- Knowledge of host/agent-based information security or endpoint management technologies: Antivirus, HIPS, EDR, DLP, SCCM, JAMF.
- Real-time Threat detection, remediation, and quarantine on end devices.
- Accountable for setting a standardized framework on endpoint security configurations & policies.
- Involve in endpoint agent version upgrades, migration or fresh deployment.
- Participate in proof of concepts and other technical evaluations of technologies, solutions and provide recommendations.
- Knowledge of emerging technologies and threats proactively assess and evaluate the adoption thereof into the organization.
- Proven experience delivering large scale, highly available security solution.
- Understanding of how operating systems work: processes, threads, files & filesystems, inter-process communications, memory & memory addressing.
- Understanding of network communications: TCP/IP stack, DNS, DHCP, Ethernet, routing, ports/protocols.
- Able to use a computer from the command line: Bash, PowerShell, Command Prompt, terminal, SSH.
- Knowledge of host/agent-based information security or endpoint management technologies: Antivirus, HIPS, EDR, DLP, SCCM, JAMF, Qualys.
- Experience in the operations, management, monitoring and maintenance of enterprise applications, servers, and network technologies.
- Knowledge of network-based information security technologies: firewalls, IDS, IPS, DLP, WAF.
- Strong ability to focus and complete detailed tasks with high degree of accuracy.
- Should be able to communicate complex information clearly and logically, both verbally and in writing.