Senior Security Specialist

Location: Bangalore, India
Department: Security

The Senior Security Specialist serves as the first line of defence for security-related communications received by the organisation on the generic security mailbox.

The role performs advanced investigations of security-related communications, drives process improvement initiatives, and serves as a primary escalation point for complex mailbox-related security incidents.

Key Responsibilities

Mailbox Monitoring & Triage

• Continuously monitor Target's primary security mailbox and take necessary actions on incoming emails according to severity.
• Investigate and handle initial escalations from security mailbox incidents and issues.
• Act as a primary coordinator between various stakeholders and the Triage team to handle incidents and issues.
• Review incoming submissions and alerts, allocating or taking action accordingly.
• Prioritise requests based on risk and severity from the generic security mailbox.
• Ensure adherence to response SLAs that vary according to email severity.
• Perform initial screening, categorisation, routing, and deeper investigation of emails in the security mailbox.

Security Analysis

• Analyse phishing submissions.
• Investigate suspicious email activity.
• Perform root cause analysis for serious issues triggered through the mailbox.
• Support and coordinate with stakeholder teams to contain threats.
• Review suspicious links and domains, taking appropriate action.
• Assess suspicious attachments and take action or inform relevant security teams.
• Validate reported security concerns and initiate action.
• Identify indicators of compromise (IOCs) that may affect Target.
• Ensure accurate documentation of serious cases and drive them for closure.

Additional Responsibilities

• Respond to security-related inquiries.
• Educate users on security best practices.
• Provide clear guidance to reporters.
• Maintain professional communication standards.
• Escalate incidents according to severity.
• Coordinate with Cyber Defence teams.
• Engage Incident Response teams when required.
• Ensure critical incidents receive immediate attention.
• Contribute to knowledge articles.
• Identify recurring attack patterns.
• Recommend process improvements.
• Participate in team training activities.

Security Knowledge

• Email security fundamentals.
• Phishing techniques and handling.
• Malware fundamentals and social engineering attacks.
• Analytical thinking and good communication skills with ownership and accountability.

Experience

• 3-4 years of cybersecurity experience.
• Experience in SOC or security operations or security mailbox management for a large organisation.
• Experience handling phishing and security investigations is preferred.
• Worked heavily towards metrics/SOP/KPIs in a large team and focusing on results.

Certifications

• Experience in MS Office 365/Security+/Certified SOC Analyst