Senior Security Engineer
Oracle
Oracle
Join our innovative Integrated Security Operations Center (ISOC) in Bengaluru as a Security Analyst. This role offers a dynamic environment to monitor, investigate, and respond to security alerts across our technological landscape. Your primary duty involves 24x7 alert triage, distinguishing genuine threats from normal activity, assessing their impact, and taking swift, appropriate actions. As you grow and your skills develop, you'll also contribute to critical areas like incident response, detection engineering, threat intelligence, and security enhancement projects. This is an excellent opportunity to shape a new security hub while gaining extensive investigative experience.
Key responsibilities include: - Conducting comprehensive security monitoring, alert triage, and incident response. - Investigating alerts from SIEM, EDR, identity, email, network, and cloud security platforms. - Correlating logs to determine alert validity, severity, scope, and business impact. - Executing response playbooks, performing containment and remediation, and escalating critical issues. - Documenting investigations and ensuring clear shift handoffs. - Collaborating with security, IT, and business teams to resolve issues. - Supporting incident response with evidence collection, timeline development, and containment. - Contributing to post-incident reviews and process improvements. - Identifying recurring alert patterns and automation opportunities. - Assisting in the development, testing, and tuning of detection rules. - Reviewing threat intelligence and applying it to investigations. - Contributing to special projects like data source onboarding and tool evaluation.
We are looking for candidates with: - A solid foundation in security operations, common attack vectors, and incident investigation. - Familiarity with Windows, Linux, networking, authentication, and enterprise/cloud services. - Practical experience with security alerts, logs, and tools such as SIEM or EDR. - Strong analytical judgment and the ability to follow procedures while knowing when to escalate. - Excellent written and verbal communication, documentation, and collaboration skills. - Flexibility to work scheduled shifts, including nights, weekends, and holidays. - Typically 1-4 years of relevant experience in security operations, incident response, or IT operations. Internships, labs, or equivalent practical experience are also valued. - A degree in cybersecurity, computer science, or a related field, or equivalent practical experience.
Oracle
Information Technology & Services