Job Overview

Netskope Global Information Security organization is looking for a senior security analyst to be part of the application security team. This position will be responsible for implementing and automating security controls in different phases of the software development process and be a SME for DevSecOps functions.

Roles & Responsibilities

• Collaborate with SOC, engineering, and security teams (PSIRT) to detect, respond, recover and investigate security incidents to determine the impact, exposure and risk
• Perform compromise assessments to identify potential compromises and their scope
• Collect and built Threat Intelligence (IOCs and TTPs)
• Implement monitoring and alerting capabilities to detect security incidents and act on the alerts in a timely manner to investigate.
• Build forensics and digital investigation (DFIR) setup to perform cyber forensics on the devices and assets.
• Conducting forensic and digital investigations and analysis in support of cyber incidents that are reported into the CSIRT team
• Conducting investigation on possible data exfiltration by malicious insiders and reporting back to management team with detailed reports
• Conducting investigation into possible data exposures and data loss due to any issue or events and reporting back to management with detailed reports
• Creating Root cause analysis, Lessoned Learned for the incidents investigated to build more defensive solutions and controls.
• Run independent incident investigations and projects by working with a cross functional team.
• Creating SOP/Guidance documents for running different investigations

Qualifications/Requirements

• Minimum 5+ years experience in Incident Response in a global corporate enterprise
• Fundamental knowledge on basic security concepts and how to defend and respond to those
• Must have knowledge on security fundamentals such as CIA, Cryptography and controls
• Proven experience in Forensics tools such as FTK, Autopsy, Cellebrite, SIFT etc
• Proven knowledge of security monitoring tools SIEM preferable Sumo
• Proven ability to perform event analysis and correlation
• Strong understanding of Windows, Mac, and Linux operating systems
• Excellent written and verbal communication skills
• Self-motivated, curious, knowledgeable pertaining to latest threats and threat actors