Kaivale Technologies - Cyber Security Engineer - CompTIA Security (5-12 yrs)

Cyber Security (Carbon Black EDR ).

Experience - 5 to 12 + years.

Location - Navi Mumbai.

Qualifications.

- Graduation/Post graduation in, Computers, Information Systems, Computer Science, or Information.

technology systems.

- Relevant- work experience in cyber security /Information security project, with security posture.

Assessment.

- At least one technical certification required (CEH, CompTIA Security+, CBCA, CSA etc.

- Should have at least one cyber security certification (CISM, CCIR, ECSA, GCIH etc).

- Knowledge of banking business and information technology practices and trends in banking sector.

- Understanding of technology-related issues and how they might impact business;.

- Ability to communicate effectively, both orally and in writing.

- Knowledge of banking business and information technology practices and trends in banking sector.

Roles & Responsibilities :

- Lead and manage advanced threat detection and response efforts using carbon black EDR across our clients 'endpoints.

- Investigate and analyse sophisticated security alerts and events to determine root cause, scope and impact of security incidents.

- Provide technical expertise and guidance to junior analysts (L1, L2s), assisting with incident investigations, analysis and resolution.

- Develop and implement advanced detection and response strategies using Carbon Black EDR to enhance our overall security posture.

- Lead incident response efforts, including coordination with cross-functional teams and external stakeholders.

- Conduct in-depth analysis of endpoint data and logs to identify indicators of compromise (IOC's) and advanced attack techniques.

- Collaborate with threat intelligence teams to stay updated on emerging threats and tactics used by threat actors.

- Develop and maintain security playbooks, procedures and response plans for incident response and threat hunting.

- Assist in the tuning and optimization of Carbon Black EDR policies, SIEM rules and custom queries to improve detection efficacy.

- Stay abreast of industry best practices, emerging technologies and trends in endpoint security and threat detection.