Cyber Security Engineer

About the Company

Responsibilities

• ● Triaging alerts: Monitor global and local SOC environments for real-time security events.
• ● Incident investigation: Execute standard Incident Playbooks to contain and neutralize threats.
• ● Forensic analysis: Conduct root cause analysis on network and endpoint security incidents.
• ● Threat hunting: Search logs proactively to identify undetected malicious activities.
• ● Platform administration: Manage and configure ArcSight SIEM Manager.
• ● Log parsing: Develop and maintain custom ArcSight Parsers for unique log sources.
• ● Rule optimization: Fine-tune SIEM use cases to reduce false positive alerts.
• ● Data correlation: Create correlation rules to detect complex attack patterns.
• ● Policy engineering: Design, deploy, and maintain corporate DLP policies across the enterprise.
• ● Tool management: Configure and manage Symantec DLP tools and technologies.
• ● Incident mitigation: Monitor, detect, and respond to unauthorized data transfers.
• ● Access governance: Implement data encryption practices to safeguard sensitive information.
• ● EDR management: Deploy and maintain Endpoint Detection and Response (EDR) solutions.
• ● Vulnerability scanning: Run network and system vulnerability assessments using Nessus.
• ● Endpoint control: Use Tanium for real-time asset discovery and endpoint management.
• ● Access controls: Manage secure web gateways (Proxies) and Mobile Device Management (MDM).
• ● Playbook development: Build automated workflows within the SOAR platform.
• ● Process optimization: Streamline response times by automating repetitive analyst tasks.
• ● Tool integration: Connect SIEM, EDR, and DLP tools into the SOAR ecosystem.
• ● SIEM: ArcSight SIEM Manager, ArcSight Parser development.
• ● DLP: Symantec DLP Tool, policy creation, data classification.
• ● Automation: Security Orchestration, Automation, and Response (SOAR) playbooks.
• ● Vulnerability & Endpoint: Nessus, Tanium, EDR platforms.
• ● Network & Mobility: Secure Web Proxies, Mobile Device Management (MDM).
• ● Core Security: Cryptography/Encryption standards, threat hunting methodologies, digital forensics.

Requirements

• ● Experience working in a hybrid GSOC / Local SOC architecture.
• ● Industry certifications: CISSP, CEH, GCIH, or platform-specific certifications (ArcSight, Symantec, Tanium).
• ● Dynamic and collaborative team in a supportive and innovative work environment.
• ● Opportunities for professional growth and development.
• ● Competitive compensation and benefits package.
• ● Be a part of shaping the future of insurance in India.
• ● This position may involve working in an office setting or remotely, depending on company policies and Flexibility in hours may be required to meet team needs.
• ● About Company: - Aviva plc is a British multinational insurance company headquartered in London, England. It has about 18 million customers across its core markets of the United Kingdom, Ireland and Canada. And Aviva India, a subsidiary of the global Aviva group, is a dynamic and growing player in the Indian insurance market. We offer diverse insurance and financial solutions, emphasize innovation, and prioritize sustainability.
• ● Support, coaching and feedback from some of the most engaging colleagues around
• ● Opportunities to develop new skills and progress your career
• ● The freedom and flexibility to handle your role in a way that's right for you