Infosys—IT&Data Sr. Product Analyst CERT Asia

Job description

Description: Key Responsibilities • Investigate security alerts from security tools and business stakeholders. • Perform triage, qualification, and analysis of potential security incidents. • Validate incidents and determine severity, impact, and scope. • Lead investigations involving endpoint, network, cloud, identity, and application telemetry. • Coordinate containment and remediation activities with IT and business teams. • Maintain detection standards, operational procedures, and knowledge management repositories. • Identify areas for improvement and recommend enhancements to security products and monitoring capabilities. • Support continuous improvement of SOC tools, detection use cases, automation workflows, and response processes. • Collaborate with Detection Engineering teams to improve detection coverage and reduce false positives. • Support platform enhancement initiatives by documenting requirements, evaluating solutions, and tracking implementation progress. • Develop operational metrics, dashboards, and reports to measure security operations effectiveness. • Ensure continuous security monitoring and incident response coverage within a global operating model. • Collaborate with Product Owners, Cybersecurity teams, IT teams, and business stakeholders. Required Skills & Competencies - Must Have • Strong knowledge of SOC operations, incident detection, investigation, and response. • Hands-on experience with: o SIEM: Sekoia.io o EDR/XDR: SentinelOne o SOAR: Palo Alto Cortex XSOAR o Email Security: Proofpoint • Experience investigating endpoint, network, cloud, identity, and email security threats. • Strong understanding of threat detection methodologies and incident response processes. • Expertise in security monitoring, log analysis, and cybersecurity operations. • Strong stakeholder management, communication, and collaboration skills. • Analytical thinking, reporting, and problem-solving capabilities. • Good knowledge of networking concepts and security technologies. Required Skills & Competencies - Good to Have • MITRE ATT&CK Framework. • Threat Hunting. • ServiceNow and Jira. • Cloud Security Monitoring. • Scripting and Automation. • Product Ownership and Agile Delivery Practices. • Vulnerability Management. • Detection Engineering concepts and use case development. Requirements: The SOC Product Analyst is responsible for advanced investigation, validation, and response to cybersecurity incidents. The role performs in-depth analysis of alerts generated by security monitoring platforms and business stakeholders, conducts incident investigations, supports containment and remediation activities, and contributes to the continuous improvement of detection capabilities. The analyst acts as the technical interface between Detection Engineering, Incident Response, Threat Hunting, and Security Platform teams to improve the effectiveness, scalability, and reliability of security monitoring and response capabilities. The role drives continuous enhancement of detection content, telemetry coverage, response automation, investigation workflows, and SOC platform effectiveness through engineering-focused analysis and prioritization. Additionally, the analyst supports cybersecurity product and platform enhancements by gathering operational requirements, identifying improvement opportunities, defining use cases, and contributing to the continuous evolution of SOC capabilities. Working Hours The SOC analyst team operates within a global security monitoring model to ensure continuous incident detection and response coverage. • Participation in rotational shifts covering weekdays and weekends. • Support multiple geographic regions and time zones. • Participate in a global 24x7 security operations model. • Availability for incident response escalations and critical security events as required. Responsibilities: Key Responsibilities • Investigate security alerts from security tools and business stakeholders. • Perform triage, qualification, and analysis of potential security incidents. • Validate incidents and determine severity, impact, and scope. • Lead investigations involving endpoint, network, cloud, identity, and application telemetry. • Coordinate containment and remediation activities with IT and business teams. • Maintain detection standards, operational procedures, and knowledge management repositories. • Identify areas for improvement and recommend enhancements to security products and monitoring capabilities. • Support continuous improvement of SOC tools, detection use cases, automation workflows, and response processes. • Collaborate with Detection Engineering teams to improve detection coverage and reduce false positives. • Support platform enhancement initiatives by documenting requirements, evaluating solutions, and tracking implementation progress. • Develop operational metrics, dashboards, and reports to measure security operations effectiveness. • Ensure continuous security monitoring and incident response coverage within a global operating model. • Collaborate with Product Owners, Cybersecurity teams, IT teams, and business stakeholders. Required Skills & Competencies - Must Have • Strong knowledge of SOC operations, incident detection, investigation, and response. • Hands-on experience with: o SIEM: Sekoia.io o EDR/XDR: SentinelOne o SOAR: Palo Alto Cortex XSOAR o Email Security: Proofpoint • Experience investigating endpoint, network, cloud, identity, and email security threats. • Strong understanding of threat detection methodologies and incident response processes. • Expertise in security monitoring, log analysis, and cybersecurity operations. • Strong stakeholder management, communication, and collaboration skills. • Analytical thinking, reporting, and problem-solving capabilities. • Good knowledge of networking concepts and security technologies. Required Skills & Competencies - Good to Have • MITRE ATT&CK Framework. • Threat Hunting. • ServiceNow and Jira. • Cloud Security Monitoring. • Scripting and Automation. • Product Ownership and Agile Delivery Practices. • Vulnerability Management. • Detection Engineering concepts and use case development. Skills: Experience & Qualifications Total Experience: 5-8 years. Relevant Experience: 3-5 years in one or more of the following areas: • SOC Operations • Security Monitoring • Incident Response • Detection Engineering • Security Tool Administration • Cybersecurity Product Management Education: Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, or a related field. Preferred Certifications: • Microsoft SC-200 • GCIH • Security+ • GCFA • ITIL • CSPO • Other relevant cybersecurity or product management certifications