Senior Security Analyst

About the job

We're looking for a Senior Security Analyst in Pune to help protect TomTom's global environment from evolving cyber threats. You'll drive incident response, threat hunting, and detection engineering initiatives while working with a highly skilled and collaborative security team.

What You'll Do

• Monitor, triage, investigate, and respond to suspicious activity across all company assets.
• Perform log analysis and analyse datasets to support alert and response activities.
• Provide data driven insights to improve cybersecurity operations.
• Create & maintain detection use cases & implement improvements.
• Interface with other teams as required.
• Perform root cause analysis of security issues.
• Use a combination of manual and automated tools to proactively analyse various data.
• Help stakeholders to determine the best course of action to remedy the problem
• Work effectively with team members and leadership by communicating cybersecurity trends and sharing ideas and knowledge in a constructive and positive manner;
• Actively participate in our goal to continuously improve the way we work; identify improvement areas on our technology, process and techniques to enhance our detection and response capabilities.
• Ensure the ongoing core objectives of the CSIRT are accomplished and measurable.
• Be a part of our Security on-call rota
  
• What you’ll need
• Minimum 5+ years working in security practices (CSIRT/SOC experience preferred);
• Demonstrable experience of the incident response lifecycle at both technical and procedural level;
• Demonstrable experience performing incident response across different operating systems
• Ability to quickly solve problems using scripting and automation;
• Strong understanding of IT fundamentals across networking, system, and application layers;
• Strong understanding of Cloud infrastructure & experience of incident response in cloud environments.
• Proven ability to prioritize incoming escalations and requests appropriately using clear communications;
• Excellent interpersonal and communication skills in order to share knowledge with peers and to communicate effectively with different stakeholders;
• Strong knowledge of Endpoint Detection and Response (EDR) tools for incident analysis;
• Expert knowledge of Security Incident & Event Monitoring (SIEM) tools for incident analysis;
• Willingness to be part of an on-call rota for out of hours escalations
• What’s nice to have
• 5+ years working in an enterprise level organization with responsibilities related to computer security or system administration
• Experience in the automation & orchestration of security playbooks (SOAR)
• Strong written and verbal communication skills
• SANS certifications (GCIH, GFNA, GCIA, GSEC, etc.)
• Experience working with distributed teams
• What we offer
  A competitive compensation package, of course.
  Time and resources to grow and develop, including a personal development budget and paid leave for learning days, as well as paid access to e-learning resources such as O’Reilly and LinkedIn Learning.
  Time to support life outside of work, with enhanced parental leave plus paid leave to care for loved ones and volunteer in local communities.
  Work flexibility, where TomTom’ers, in agreement with their manager and team, use both the office and home to focus, collaborate, learn and socialize. It’s all about getting the best out of both worlds – we ask TomTom’ers to come to the office two days a week, and the remaining three are free to be worked in either location.
  Improve your home office with a setup budget and get extra support with a monthly allowance.
  Enjoy options to work from your home country and abroad for a set number of days each year, to visit family and friends, or to simply explore the world we’re mapping.
  Take the holidays you want with a competitive holiday plan, plus an extra day off to celebrate your birthday.
  Join annual events like our Hackathon and DevDays to bring your ideas to life with talented teammates from around the world.
  Become a part of our inclusive global culture and have the chance to collaborate with a diverse community – we have over 80 nationalities at TomTom!
  Find out more about our global benefits and enjoy additional local benefits tailored to your location.
  Meet your team
  We're the Information Security Unit. We keep TomTom's data safe, securing product, service, customer and TomTom'er information. In our team, you'll help maintain data privacy and minimize risk wherever possible, ensuring that we continue to run smoothly and make a difference to lives around the world.
  At TomTom...
  You’ll help people find their way in the world. In 2004, TomTom revolutionized how the world moves with the introduction of the first portable navigation device. Now, we intend to do it again by engineering the first-ever real-time map, the smartest and most useful map on the planet.
  Work with a team of 3,300+ unique, curious and passionate problem-solvers. Together, we’ll open up a world of possibilities for car manufacturers, enterprises and developers to help people understand and get closer to the world around them.
  After you apply
  Our recruitment team will work hard to give you a meaningful experience throughout your journey with us, no matter the outcome. Your application will be screened closely and you can rest assured that all follow-up actions will be thorough, from assessments and interviews all the way through onboarding. To find out more about our application process, check out our hiring FAQs.
  TomTom is an equal opportunity employer
  TomTom is where you can find your place in the world. Every day we welcome, nurture and celebrate differences. Why? Because your uniqueness is what makes you, you. No matter your culture or background, you’ll find your impact at TomTom. Research also shows that sometimes women and underrepresented communities can be hesitant to apply for positions unless they believe they meet 100% of the criteria. If you can relate to this, please know that we’d love to hear from you.