Cyber Operations Engineer II

«out Conduent Through our dedicated associates, Conduent delivers mission-critical services and solutions on behalf of Fortune 100 companies and over 500 governments – creating exceptional outcomes for our clients and the millions of people who count on them. You have an opportunity to personally thrive, make a difference and be part of a culture where individuality is noticed and valued every day. Job Description This position is for a Level 2 Security Monitoring Analyst that will join our Cyber Security Operations team in Bangalore, India. The purpose of the role is to work with various tools and technologies, preferably SIEM and EDR for discovering security incidents. Performing real time monitoring on malicious activities, intrusions, infiltration attempts, analyzing logs looking for attack patterns to ensure infiltration attempts are identified and dealt with in a timely manner. Performing security analysis and review the alerts, escalate to Level-3. Provide primary level of analysis and provide technical insights for security incidents. PRIMARY DUTIES AND RESPONSIBILITIES Primarily responsible for executing the security event assessment of security events from SIEM reporting systems, identify threats to our environment, remediate security threats and recovery of systems from security incidents. Works closely with Level 2 & Level 3 team towards the continuous improvement of the service Responsible to ensure that all applications are functional and secure (IT security, Application Security and Information Security) Perform real time security monitoring and incident response activities across the global networks, leveraging a variety of tools and techniques Detect incidents through use cases, threat intelligence and hunting process across security-relevant data sets Recommend new, repeatable methods for finding malicious activities. Ensure all standards including Security Incident Response Process and guidelines are followed Must be able to communicate effectively with individuals at all levels of the organization. Provides correlation and trending of critical cyber incident activity. Improving the service level for security operations and monitoring. Creating and maintaining system documentation for security event processing. Author Standard Operating Procedures (SOPs) and training documentation Analyze incident indicators and tactics, techniques, and procedures (TTPs) to identify tools, provide context and severity Manage and maintain security tools to increase incident response efficiency Improve ability to detect and respond to intrusions. Help create and maintain process and tools documentation. QUALIFICATIONS Education and Experience Bachelor’s Degree from four-year college or university in Information Technology, Information Security/Assurance, Engineering or similar area of study required. Prefer 1-2 years SOC/ Information Security experience. Prefer Experience working as part of globally distributed teams. Prefer 1-2 years Managed Services experience Prefer 1-2 years SIEM technologies experience such as Splunk, LogRhythm, Nitro, QRadar, SA, enVision, Arcsight, etc. Prefer 1-2 years EDR technologies experience such as Carbon Black, CrowdStrike etc.. Prefer 1-2 years endpoint security technologies experience Preferred candidates will have one or more certifications in Security/Networking including Security+, GSEC, GCIA, GCIH, or other security specific vendor/product certifications Proven ability to make decisions and perform complex problem solving activities under pressure. Sharp analytical abilities and the ability to make sound decisions quickly required. Closing Conduent is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, creed, religion, ancestry, national origin, age, gender identity, gender expression, sex/gender, marital status, sexual orientation, physical or mental disability, medical condition, use of a guide dog or service animal, military/veteran status, citizenship status, basis of genetic information, or any other group protected by law. People with disabilities who need a reasonable accommodation to apply for or compete for employment with Conduent may request such accommodation(s) by clicking on the following link, completing the accommodation request form, and submitting the request by using the