Associate Data Analyst – Cyber Security, Incident Response

About General Mills

We make food the world loves: 100 brands. In 100 countries. Across six continents. With iconic brands like Cheerios, Pillsbury, Betty Crocker, Nature Valley, and Häagen-Dazs, we’ve been serving up food the world loves for 155 years (and counting). Each of our brands has a unique story to tell. How we make our food is as important as the food we make. Our values are baked into our legacy and continue to accelerate

us into the future as an innovative force for good. General Mills was founded in 1866 when Cadwallader Washburn boldly bought the largest flour mill west of the Mississippi. That pioneering spirit lives on today through our leadership team, who upholds a vision of relentless innovation while being a force for good. For more details, check out http://www.generalmills.com

General Mills India Center (GIC) is our global capability center in Mumbai that works as an extension of our global organization, delivering business value, service excellence, and growth, while standing for good for our planet and people. With our team of 1800+ professionals, we deliver superior value across the areas of Supply chain (SC), Digital & Technology (D&T) Innovation, Technology & Quality (ITQ), Consumer and Market Intelligence (CMI), Sales Strategy & Intelligence (SSI), Global Shared Services (GSS), Finance Shared Services (FSS) and Human Resources Shared Services (HRSS). For more details, check out https://www.generalmills.co.in. We advocate for advancing equity and inclusion to create more equitable workplaces and a better tomorrow.

Job Overview

Function Overview

The Digital and Technology team at General Mills stands as the largest and foremost unit, dedicated to exploring the latest trends and innovations in technology while leading the adoption of cutting-edge technologies across the organization. Collaborating closely with global business teams, the focus is on understanding business models and identifying opportunities to leverage technology for increased efficiency and disruption. The team's expertise spans a wide range of areas, including AI/ML, Data Science, IoT, NLP, Cloud, Infrastructure, RPA and Automation, Digital Transformation, Cyber Security, Blockchain, SAP S4 HANA, and Enterprise Architecture. The MillsWorks initiative embodies an agile@scale delivery model, where business and technology teams operate cohesively in pods with a unified mission to deliver value for the company. Employees working on significant technology projects are recognized as Digital Transformation change agents.

The team places a strong emphasis on service partnerships and employee engagement with a commitment to advancing equity and supporting communities. In fostering an inclusive culture, the team values individuals passionate about learning and growing with technology, exemplified by the "Work with Heart" philosophy, emphasizing results over facetime. Those intrigued by the prospect of contributing to the digital transformation journey of a Fortune 500 company are encouraged to explore more details about the function through the following Link

Cybersecurity is a critical part of the Digital and Technology function. We leverage the NIST Cybersecurity Framework, key cybersecurity partners, and external benchmarking to guide the development of our program. Cybersecurity risk is managed as part of enterprise risk at GMI. We assess technical cybersecurity risks and vulnerabilities and provide recommendations to mitigate them. We design and manage cybersecurity infrastructure, identities, and controls, and we monitor for any threats and ensure a timely and comprehensive response to cyberattacks. We also measure and report compliance to cybersecurity policies and standards.

Purpose of the role

Cyber Security team of General Mills India Centre is looking for a passionate and enthusiastic individual. As a CSIRT Analyst responsible for day-to-day monitoring and deep dive investigations of the security events on 24/7 basis by ensuring alignment to SLAs. Individual should bring in proactive approach to solve complex investigations and analyze malware through GMI/open-source tools.

Key Accountabilities

Monitor and investigate cybersecurity events

• Monitor SIEM and other tools for potential threats, intrusions, or compromises
• Demonstrate ability to work in a 24x7 facility in rotating shifts.
• Thorough knowledge and adequate experience in Security Incident & Event Management (SIEM) system and SOAR Technologies.
• Good understanding of networking fundamentals & protocols.
• Good understanding of Cyber Security principles and MITRE framework.
• Deep understanding of Phishing tactics and Windows endpoint investigation.
• Analyze malware in a sandbox environment to understand the impact
• Achieve containment time SLA defined.
• Escalate cybersecurity events according to General Mills' Cybersecurity Incident Response Plan and follow the escalation path.
• Quick learner, good analytical skills, and action-oriented.
• Agility in incident response.
  
  

Maintain quality and consistency

• Perform peer review of events as a part of the audit requirement.
• Participate in projects to streamline processes.
• Participate in Detection fine-tunings.
• Make timely and high-quality decisions.
• Collaborate across Cyber and different functional verticals.
• Create better solutions through tireless curiosity and innovation, stretching beyond your area of expertise.
  
  

Must-have Technical Skills And Experience

• Demonstrate ability to work in 24x7 facility in rotating shifts
• Demonstrated ability to get things done both independently and in a collaborative, team-oriented environment.
• Understanding of networks, network security (IDS/IPS/Firewall, etc.), SIEM, SOAR, and Endpoint detection and response (EDR).
• Hands-on experience in incident response processes and tools to detect, analyze, respond, and contain cybersecurity threats quickly and correctly
• Understanding of forensic techniques used to analyze threats (including malware), to extract key indicators of attack and compromise
• Knowledge of tools and techniques used by attackers to gain unauthorized access to systems
• Good understanding of Cyber Security principles and MITRE framework.
• Deep understanding of Phishing tactics and Windows endpoint investigation.
• Analyze malware in a sandbox environment to understand the impact
  
  

Minimum Qualifications

• Education – Full-time graduation from an accredited university
• 2+ years of relevant work experience
• Technologies – SIEM knowledge, networking protocols, Cyber principles.
• Willingness to work a rotational shift schedule to support a 24/7 operation
• Good communication skills.
  
  

Preferred Qualifications

• Certified Ethical Hacker, CompTIA Cybersecurity Analyst, EC-Council Certified Incident Handler Certifications
  
  

Company Overview

We exist to make food the world loves. But we do more than that. Our company is a place that prioritizes being a force for good, a place to expand learning, explore new perspectives and reimagine new possibilities, every day. We look for people who want to bring their best — bold thinkers with big hearts who challenge one other and grow together. Because becoming the undisputed leader in food means surrounding ourselves with people who are hungry for what’s next.