- Prior experience in handling Information security violations. - Responsible for complete security incident management life cycle - Validate the legitimacy of the reported incident. - Identify & check the possible source / incident origin. - Perform event co-relation - Gathering evidence and preparing report. - Complete understanding about life cycle of Information Security Incident. - Extraction and analysis of logs from various devices like proxy, firewall, email gateway, IPS, IDS, Desktop, laptop, servers, Mail Servers, SIM tool, router, firewall, switches AD server, DHCP logs, Access Control Logs & conclude as part of investigation process. - Comprehensive understanding and previous oversight of IT hardware, software, networking, databases, API services, J2C and related hosting needs. - Perform Bit stream Imaging/acquiring of the Digital Media Seized during the process of Investigation. - Use of Encase, FTK Access Data, and other forensic tools for acquiring and analysis of the data from the various Storage devices. - E-discovery and vault email extraction. - Handle Information security violations identified through Data Loss Prevention tool (preferably Mcafee). - Carry out forensic investigations as and when necessary, willing to shuttle between offices. - Decipher attack motivations and techniques by correlating threat data from various sources to complete a comprehensive picture of potential cyber-attacks - Enable a world-class cyber defense program by working closely with other technical, incident management, and forensic personnel to develop a fuller understanding of the intent, objectives, and activity of cyber threat actors - Perform periodic analysis / publish reports on trend analysis. - Identify process improvements derived from security incidents & follow-up with concerned teams to further evolve forensic framework. - Regular interaction and discussion with Information Risk Management Compliance Team for regulating standard security practices across the organization. - Ensuring reported incident or suspected weaknesses, malfunctions and deviations are handled with confidentiality. - Should have worked on various Forensic tools like Encase, FTK and NUIX and SIFT. - Should have good Windows and Linux OS knowledge. - Should have basic knowledge about packet sniffers. - Should have good MS office (Excel and Word) skills. - Exposure to any of the SIEM tools like Arcsight or RSA Envision. - Should have thorough understanding on network & security architecture. - Knowledge on scripting tools such as shell, VB & Perl in an added advantage - GCFA, GCIH, CHFI, CCFP, CEH, CCNA and CISSP will be an added advantage Technical Skills : - Good positive attitude and patience - Excellent communication skills - Team player - Strong analysis and Windows knowledge - Facilitation skills Wipro is an Equal Employment Opportunity employer and makes all employment and employment-related decisions without regard to a person's race, sex, national origin, ancestry, disability, sexual orientation, or any other status protected by applicable law The Apply Button will redirect you to website. Please apply there as well.

Bangalore

Wipro - Incident Handler/Information Security Analyst 

Wipro - Incident Handler/Information Security Analyst  ,Job Description for Wipro - Incident Handler/Information Security Analyst  in Wipro Limited in  Bangalore for (5-10) years of experience. Apply Now!

Job Description for Wipro - Incident Handler/Information Security Analyst  in Wipro Limited in  Bangalore for (5-10) years of experience. Apply Now!