Security Incident Response Management_3377

Role overview

Security Incident Response Management_3377 at Allianz

Employment details

• Location: India

About the employer

• Allianz Group is one of the most trusted insurance and asset management companies in the world.

Additional role details

• QUALIFICATION. 8+ years of hands-on experience with a background in the modern attacker kill-chain, MITRE ATT&CK, and emerging enterprise threats.
• Understand digital forensics and incident response as it applies to the cloud. 3+ years’ experience with Azure\AWS\GCP and\or Kubernetes and containers security. 3+ years of experience querying and analysing large datasets, including experience building automated reports, alerting, workflows, and/or business intelligence solutions (e.g. SQL, Python, KQL/Azure Data Explorer, Excel, PowerBI, etc.). 5+ years’ experience in cyber security, threat detection, and incident response.
• Proven experience with automation and orchestration to effectively handle an extreme volume of telemetry and logs in a timely and efficient manner.
• Familiarity with backend data structures used for security analysis (JSON, YAML, etc.).
• Experience using query languages and understanding syntax across EDR or other security platforms.
• Experience creating and tuning detectors/rules using commonly known tools such as YARA, SIGMA, Snort, Splunk, Elastic, etc.
• Experience using version control software for the deployment of detectors, rules, or other automations (GitHub).
• Strong understanding of network security, malware analysis, and security operations.
• Familiarity with security information and event management (SIEM) tools, EDR, DLP and relevant technologies.
• Relevant certifications such as Certified Incident Handler (GCIH) or Certified Threat Intelligence Analyst (CTIA) or Certified Threat Hunter (CThH)any industrial hunting certifications.
• Exposure in AI , gen AI technologies preffered.
• KEY COMPETENCIES.
• Threat Hunting tools (e.g.: EDR – Crowdstrike, Sentinel One etc).
• Forensic Analysis (e.g. Volatility, EnCase, Autopsy etc).
• Open-source tools and scripts, including YARA for malware detection, Sysinternals Suite for system.
• Expert knowledge in Python and PowerShell.
• Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer.
• Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.
• At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all.
• And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.
• We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.
• Join us.
• Let's care for tomorrow.