Incident Response Specialist - Cybersecurity
- Varian Medical Systems
- 5 - 8 Years
- Pune
- 3 years ago
- Email to a friend
- Report this job
Job Description
Together, we can beat cancer.
At Varian, we bring together the world's best talent to realize our vision of a world without fear of cancer. Together, we work passionately to develop and deliver easy-to-use, efficient oncology solutions. If you want to be part of this important mission, we want to hear from you.
We are hiring an Incident Response Specialist who has technical and coordination responsibilities for managing Cybersecurity Incidents . In this function you support the definition and improvement of processes and procedures for Incident Detection, provide the technical expertise to address demands of the Respond and Recover phases of Incident Response, and you drive the continuous improvement phase of the Incident Response Process.
Tasks and Responsibilities
The position will bring a mix of the following tasks and responsibilities:
- Assess, triage, and prioritize security-relevant events from logging and monitoring systems.
- Coordinate and lead Incident Response taskforces and provide technical expertise, working with different business functions such as IT Operations, HR, Legal, Data Privacy, Corporate Communications and Product Security.
- Document and track cybersecurity incidents through their entire lifecycle, from initial detection, triage, response to final resolution and improvements.
- Derive immediate mitigation measures for containment, eradication, and recovery of cybersecurity incident and keep track of its implementation progress during incident response task forces.
- Consume threat intelligence to detect, triage and remediate malware, threats and adversarial activity.
- Develop and carry out regular threat hunting (proactive) activities, making sure learnings are properly documented and propagated to neighboring teams and functions.
- Leverage threat hunting to create and maintain Situational Awareness for related company functions such IT operations, security architects, or service providers.
- Perform analysis of different log files and data sources to identify adversarial activity and anomalies.
- Assess newly arising vulnerabilities and Tactics, Techniques and Procedures (TTPs) to define defensive measures to detect and disrupt adversarial actions. Coordinate with neighboring functions to ensure those measures are turned into actionable changes.
- Collect forensic artifacts, analyze, reverse engineer, and document findings on malicious payloads so that indicators of compromise and information about threats origin and intents are properly disseminated and acted upon.
- Use industry standards to produce and disseminate our own Threat Intelligence to our internal counterparts and external partners.
- Consider business aspects to support an adequate triage and prioritization of cybersecurity incidents, whilst ensuring root-cause are properly clarified. Communicate findings and possible improvement measures in an actionable way.
- Operate and drive continuous improvement to SOC playbooks to protect company personnel, businesses, and assets.
- Document and communicate abstracts and consolidated incident-related findings and trends to support security architecture and security awareness functions.
- Understand and employ defense-in-depth principles and practices to create and maintain defense mechanisms.
Qualifications
Experience: 5+ years of relevant work experience
Education: Bachelor's Degree in computer science. Relevant Industry Certifications such as SANS/GIAC (for example, GCIA, GCIH, GNFA, GCFA), CompTIA Security+ CISSP, CISA, CISM are desirable.
Technology: Cybersecurity, , Cyber Threats & Vulnerability Assessment
Knowledge of relevant technological aspects for this position. The ideal candidate should bring a mix of expertise in (a subset of) the following areas:
- Computer networking concepts and protocols, and network security methodologies
- Risk management processes and methods for assessing and mitigating risk
- Laws, regulations, policies, and ethics as they relate to cybersecurity and privacy. Cybersecurity and how it impacts privacy principles.
- Knowledge of cyber threats and vulnerabilities: how to properly identify, triage, and remediate threats based on threat intelligence as well as on analysis of log data and network traffic.
- Host/network access control mechanisms (e.g., access control list, capabilities lists).
- System administration, network, and operating system hardening techniques.
- Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
- Incident categories, incident responses, and timelines for responses.
- Incident response and handling methodologies.
- Intrusion detection methodologies and techniques for detecting host and network-based intrusions.
- Network traffic and packet-level analysis.
- System and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, code and command injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
- Experience with Malware analysis, sandboxes, reverse engineering, and tools such as Radare2, OllyDbg, and Hex-Rays IDA Pro.
- Experience with operating system security controls on common platforms such as Linux, Windows.
- Experience with scripting languages (e.g., Python, Bash or PowerShell) and using REST API, as well as data processing, regular expressions, and console-based text processing tools (e.g., sed, awk, jq)
- Models to describe and document cyber-attacks (e.g., reconnaissance, scanning, enumeration, persistency, lateral movement, exfiltration) such as Cyber Kill Chain or MITRE ATT&CK
- Cloud service models and how those models can limit incident response.
- Application Security Risks (e.g. Open Web Application Security Project Top 10 list).
Personality Traits
- Negotiation skills and ability to set and track priorities and deadlines.
- Able to work on a very tight schedule, while keeping track of tasks progress and deadlines.
- Able to structure complex problems and find practicable solutions to those.
- Team player but also able to work on an individual basis.
- Self-learning and curiosity to keep pace with the ever-evolving cybersecurity developments are highly appreciated.
- Advanced English and Communication skills: clear and concise communication able to address stakeholders of different backgrounds and technical expertise.
Soft Skills Requirements
- Collaboration & Customer Orientation (++)
- Intercultural Sensitivity (+)
- Team Development (+)
- Ability to multi-task and handle multiple assignments simultaneously, while focusing on delivery quality (++)
- Ability to use initiative when needed (self-motivation and proactive attitude) (++)
- Excellent communication skills (both written and verbal) in English (++)
- Quick learner and aptitude to get into new technologies and architectures (++)
Fighting cancer calls for big ideas.
We envision a world without fear of cancer. Achieving this vision takes dedication and commitment from all of us, every single day. That's why we celebrate and value the distinctly beautiful and intersectional identities of each of our employees. We are a mirror of our patient-base, which allows us to innovate. Big ideas come from everywhere, and the best ideas are fostered by our unique individual experiences. At Varian, we encourage you to bring your whole self to work and believe your bold and authentic perspective will help to power more victories over cancer.
#TogetherWeFight
Employement Category:
Employement Type: Full timeIndustry: Medical Transcription
Functional Area: IT
Role Category: Software Engineer
Role/Responsibilies: Incident Response Specialist - Cybersecurity
Contact Details:
Company: Varian Medical SystemsLocation(s): Pune
+ View Contact
Fraud Alert to job seekers!
₹ Not Specified
Varian Medical Systems
Our mission is to focus energy on saving lives. We equip the world with new tools for fighting cancer, taking X- ray images, and protecting our borders. Since the 1950s we have been producing tools that harness the power of X- ray energy to benefit humankind. In recent decades, we have pioneered ...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in
