Lead Secops Analyst

Responsibilities:
Alert triage - Investigate EDR, Entra, Email, and SIEM alerts to identify threats and anomalies.
Perform detailed technical investigation on security incidents, root cause analysis, and recommend and mitigate the cyber incident as per the security framework.
Create Incident Response process/runbooks/SOPs, ensure continuous documentation and reporting.
Provide security advisory, develop use cases, support in deployment/integration, and fine-tuning of security platforms with other IT teams.
Collaborate with Corporate IT teams to strengthen InMobi's security posture and reduce attack surface.
Utilize open-source threat intelligence to evaluate threats and analyze their impact in the InMobi Environment, and deploy necessary detection/remediation procedures.
Collaborate with other Tech and Non-tech teams to achieve the cybersecurity objectives of InMobi.
Coordinate with stakeholders to understand the infrastructure, products, and business processes to ensure adequate security controls for the organization.
Provide management with deep insight into threats, new threat detection methods, and technically lead other team members to resolve complex security problems.
Requirements:
Minimum 8 years of experience in Security Operations/Incident Management is required.
Self-motivated, Self-governing individual with a penchant for Cybersecurity and a sharp eye for details.
Strong leadership skills in owning a technical lead on security issues at the Org and driving it towards closure.
Strong technical leadership skills in guiding other team members for optimal outcomes.
Strong ability to operate, decide, and evolve in ambiguous situations.
Strong interpersonal skills, good team player, excellent written and verbal communication skills.
Strong skills in correlating events, log analysis, networking basics, and cybersecurity fundamentals.
Good knowledge of SOC frameworks - MITRE ATT and CK, NIST, cyber kill chain.
Good understanding of multiple security tools like EDR, Email security, IPS/IDS, Firewall, and SIEM.
Hands-on experience in one or more Security tools like McAfee EDR, FireEye, CrowdStrike EDR, Cortex XDR, and Microsoft XDR.
Exposure to Cloud Security technologies is desirable.
Exposure to implementing and securing AI technologies is desirable.
Demonstrated good customer service, curiosity to learn, and adaptability.
GIAC / CySA+ or equivalent certified professional is preferred.
Open to learning new security concepts.

Experience
7-11 yrs