Engineer (L1 Security Operations Center)

About our group:

Plays a critical role within the Seagate Information Security L1 Operations team, focusing on monitoring and responding to security alerts, threats, and incidents. Our additional responsibilities encompass investigation, maintenance and documentation, capabilities’ improvement, and collaboration with stakeholders. We Support the organization at global level and serve as the first line of defense, monitoring various security aspects and responding promptly to threats.

About the role - you will:

• Respond to Security Alerts, Threats, and Incidents: Actively monitors security alerts and promptly respond to incidents using documented procedures
• Handle Network and System Monitoring: Keep a vigilant eye on both internal and external networks, systems, and applications to identify security anomalies and events
• Participate in Incident, Problem, and Change Management: Collaborate with the team during incident response, problem resolution, and change management processes
• Manage documentation and SOPs: Contribute to the development and maintenance of Standard Operating Procedures (SOPs) and playbooks
• Communicate effectively, clearly and concisely with the end users, team members, and other stakeholders essentially
• Work on shift work in 12-hour shifts on a rotation basis

About you:

• An excellent working knowledge of threat analysis, detection, and response processes is essential. Being aware of current cyber threats and attack vectors helps in effective incident handling

• Acquired the following knowledge areas (at least two or more):

• Windows and Unix/Linux Operating Systems, Network Devices, Firewalls, IDS/IPS, TCP/IP Protocols, General Network Architecture, Endpoint Detection and Response Tools, Email Security Tools, Cloud Security Tools, Vulnerability Management, Threat Intelligence/Detection/Hunting, MITRE Attack Framework & Cyber Kill Chain

• Critical Thinking and Analysis: adept at detecting, responding to, and escalating security alerts/incidents

• Attention to Detail: A keen eye for analyzing data and identifying anomalies is crucial

• Excellent written and verbal communication skills Excellent written and verbal communication skills are essential

• A team player with ability to collaborate effectively within a team environment

• A passion for acquiring continuous learning of new skills and delivering value to the organization

• Degree in Information Technology/Computer Science or relevant field

Note: The position is also based in our Seagate office located in Pune, India.  Applicants from India will be required to be based on site in Pune, India if he/she accepts the offer. 

Your experience includes:

• At least 3 years of IT related work background with at least 1 year in IT Security
• Administering various security tools such as Firewalls, Endpoint Detection and Response (EDR),Vulnerability Management, Email Security Tools, SIEM (Security Information and Event Management)
• Solid Background in Network and Systems Administration
• Scripting languages such as Python and PowerShell 
• Participation in Security Competitions and Capture The Flag (CTF)
• Added advantage for Certifications completed in CompTIA Security+, Cisco CCNA, Palo Alto NSE (Palo Alto Networks technologies) or any similar certifications in information security

Location:

Our Penang office is located in Suntech at Cybercity. Easily accessible from two bus stops, many employees take mass-transportation to work. Ample free on-site parking is also. Enjoy our on-site gym, test your ping-pong skills, or take on your colleagues in a badminton match after work. You can grab breakfast, lunch and coffee at our on-site cafe. Prefer to eat off-site? The public food court across the street offers many delicious options. Our Absolute Privilege club also offers Seagate employees deals for discounted food and beverages.

Location: Penang Malaysia Suntech
Travel: None