Exposure Management Analyst

Job description

Job Summary The IT Senior Security Threat Analyst (aka Threat Hunter) performs a wide variety of security duties with a primary focus on threat actor-based tactics, techniques, and procedures. The ability to manage multiple simultaneous threat hunts spanning several platforms with various TTPs is a key function of this role. Knowledge sharing and mentoring of team members and outside of the key is a critical and necessary skill. Must have the ability to operate under pressure and influence the team dynamic when responding to incidents. Security knowledge must be current, and the candidate must be able to draw from many resources including open source intelligence. Work to enhance and improve the team and processes over time in a well-established manner. Job Description MAJOR RESPONSIBILITIES Ability to create advanced correlation rules with low false positive rates Ability to explain/identify/detect malicious activity that occurs within environments with high accuracy/confidence level Able to decrypt Java Script, Visual Basic, PHP and single step encryption techniques such as base64, rot13, 1-digit keys Demonstrate mastery over digesting and locating Cyber Threat Intelligence with appropriate context and prioritization Show mastery over sorting, curating incoming intelligence, and documenting locally created intelligence Create diamond models to model threat activity Identify gaps in the Threat Hunting Program and help drive meaningful improvements Act as mentor to interested analyst or interested threat hunter proactively and help develop their skillset Work directly with management to seek out opportunities to develop and improve internal processes MINIMUM JOB REQUIREMENTS Education High School Certification / Licensure None Work Experience Advanced experience involving Threat Hunting activities/theories. Knowledge of current E-Crime threat landscape Knowledge / Skills / Abilities Ability to identify and categorize malicious activity attributed to a human threat actors Ability to mentor less experienced team members in a positive and constructive manner PREFERRED JOB REQUIREMENTS Education Degree/Course work in Data Science, Statistics, Computer Science, Criminal Justice, Reverse Engineering, Security Tool Development Certification / Licensure Technical and Strategic certifications or courses specific to penetration testing or threat hunting. SANS courses OSCP Courses Black Hills InfoSec/Antisyphon/RedCanary/Mandiant Advanced Course Work Work Experience Experience with detection engineering. Experience with malware analysis. Experience with APT/Crimeware ecosystems. Experience with MITRE ATT&CK framework Knowledge / Skills / Abilities Proven leadership experience Mastery of threat analytics Advanced CTI knowledge Proven alert creation and tuning capability. Mastery of both sorting and curating incoming intelligence and created intelligence About Medline India: Medline India was setup in 2010 in Pune, primarily as an offshore Development centre and to augment resources for Medline Industries LP headquartered in Chicago, USA. We are a 1500+ strong and growing team of technology, finance & and business support professionals who support our businesses worldwide towards a mission to make healthcare run better. We are proud to be certified as a ‘Great Place to Work’ by the Great Place to Work Institute® (India) for the duration May 2023 – May 2024. We are an organization with a conducive work environment, ample opportunities to learn, contribute and grow with a highly empowered & engaged team. We encourage our people to share their best ideas and create new opportunities for our customers and ourselves to work together to solve today’s toughest healthcare challenges. About Medline Industries, LP: Established in 1966, Medline Industries LP is a renowned global healthcare organization boasting 56 years of consecutive sales growth, exceeding $21 billion in annual sales. With a workforce of over 36,000 professionals spread across the globe, we operate in more than 125 countries and territories. As the largest privately held manufacturer and distributor of medical supplies in the United States, Medline is uniquely positioned to offer comprehensive products, education, and support across the continuum of care. At present, Medline Industries, LP holds the esteemed position as the #1 market leader, delivering an extensive portfolio of over 550,000 medical products and clinical solutions. Our clientele includes hospitals, extended care facilities, surgery centres, physician offices, home care agencies, providers, and retailers. We are proud to be recognized by Forbes as one of America’s Best Large Employers and Best Employers for Women. Additionally, the Chicago Tribune has consistently named us a Top Workplace for the past 12 years.