Bangalore, Karnataka, India
Information Technology
UKG
Overview
Job Description
Job ID
SENIO008653
Employment Type
Regular
Work Style
on-site
Location
Noida,UP,India
Role
Senior Security Analyst (SOC, Security Operations)
Company Overview
With 80,000 customers across 150 countries, UKG is the largest U.S.-based private software company in the world. And we’re only getting started. Ready to bring your bold ideas and collaborative mindset to an organization that still has so much more to build and achieve? Read on.
At UKG, you get more than just a job. You get to work with purpose. Our team of U Krewers are on a mission to inspire every organization to become a great place to work through our award-winning HR technology built for all.
Here, we know that you’re more than your work. That’s why our benefits help you thrive personally and professionally, from wellness programs and tuition reimbursement to U Choose — a customizable expense reimbursement program that can be used for more than 200+ needs that best suit you and your family, from student loan repayment, to childcare, to pet insurance. Our inclusive culture, active and engaged employee resource groups, and caring leaders value every voice and support you in doing the best work of your career. If you’re passionate about our purpose — people —then we can’t wait to support whatever gives you purpose. We’re united by purpose, inspired by you.
As a Level 3 (L3) Senior Security and Threat Monitoring Analyst, you will be part of UKG’s Global Security Operations Center (GSOC) team investigating events of interest and incidents as they are validated, prioritized, and categorized by UKG’s 24x7 L1 and L2 analyst teams. You will facilitate and follow UKG’s standard processes to investigate, contain, eradicate, and respond in a continued and unified effort to protect the confidentiality, integrity, and availability of UKG, our partners’ and customers’ data and services.
You will be an escalation point for all incidents, either regionally or during shift assignment; analyzing, confirming, re-prioritizing if necessary and/or escalating/remediating those identified threats within the UKG computing environment. You will work closely with UKG’s GSOC teams in the US, Europe, and India to promote an integrated, uniform, and holistic threat detection and response capability to facilitate and enable a robust and proactive security posture. You will leverage your skills, experience, and creativity to perform initial, forensically sound collection and analysis, methodologies to contain, eradicate, and recover from realized threats such as zero-day, ransomware, malware and other APT’s.
Additionally, you will be responsible for participating in incident response activities as part of the Cyber Incident Response Team (CIRT) or as the Cyber Incident Response Lead (CIRL), post incident reporting and continuous improvement recommendations to enhance UKG’s security posture through process development, tool rationalization, detection technique and automation enhancement opportunities and enablement/training possibilities.
Due to the nature of the work, you are required to have occasional on-call duties on weekends and/or holidays. Additional work hours may also be required during an incident investigation.
Primary/Essential Duties and Key Responsibilities:
You will be an escalation point for all incidents, either regionally or during shift assignment; analyzing, confirming, re-prioritizing if necessary and/or escalating/remediating those identified threats within the UKG computing environment. You will work closely with UKG’s GSOC teams in the US, Europe, and India to promote an integrated, uniform, and holistic threat detection and response capability to facilitate and enable a robust and proactive security posture. You will leverage your skills, experience, and creativity to perform initial, forensically sound collection and analysis, methodologies to contain, eradicate, and recover from realized threats such as zero-day, ransomware, malware and other APT’s.
Additionally, you will be responsible for participating in incident response activities as part of the Cyber Incident Response Team (CIRT) or as the Cyber Incident Response Lead (CIRL), post incident reporting and continuous improvement recommendations to enhance UKG’s security posture through process development, tool rationalization, detection technique and automation enhancement opportunities and enablement/training possibilities.
Due to the nature of the work, you are required to have occasional on-call duties on weekends and/or holidays. Additional work hours may also be required during an incident investigation.
Primary/Essential Duties and Key Responsibilities:
- Review tickets escalated from L1 or L2 analysts to confirm the priority, category and accuracy of the details and conditions.
- Pivot to additional security tools to obtain and ascertain context or information and any other pertinent information to inform on the most effective and efficient mitigation/remediation actions.
- Escalate tickets as required to GSOC Director for additional scrutiny and incident declaration.
- Collaborate with UKG internal and external groups to develop and execute containment, eradication, and recovery strategies for lower priority incidents.
- Identify, approve, and implement blocking, listing and other mechanisms to promote a robust security posture.
- Participate in the Cyber Incident Response Plan (CIRP) process as part of the Cyber Incident Response Team (CIRT) or as the Cyber Incident Response Lead (CIRL) to lead and/or support mitigating and/or remediating critical incidents.
- Participate in post-incident activities including coordinating and providing input within the requisite reports and identifying areas for continuous improvements within the GSOC enablement, processes or technology.
- Provide mentoring and enablement of junior analysts globally to expand and extend UKG’s GSOC capabilities and experiential capacities.
Qualification (Experience, Education, Certification, License and Training):
- Bachelor's degree in computer science or a related discipline
- CISSP, CCSP, GIAC or other relevant cyber security certifications
- Working professional with 6+ years of relevant Security/SOC experience
- Knowledge of the common attack vectors on the network layer, different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks).
- Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored) and cyber-attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
- Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
- Knowledge of cybersecurity, incident response methodologies, privacy principles, cyber threats, vulnerabilities, and detection methodologies and techniques for detecting intrusions.
- Experience with Splunk, Google Chronicle, Elastic Search, EDR solutions, email security tools, and cloud environments (GCP, Azure).
- Knowledge and experience in reverse engineering to understand how an information asset works and analyzing system components to identify potential vulnerabilities.
- Knowledge and experience in developing automations using scripting languages like Python and PowerShell to automate various tasks and improve accuracy, enhance task consistency, and increase scalability.
- Knowledge and experience in Security Information and Event Management (SIEM) use case and content development techniques and objectives.
- Knowledge and experience in conducting and participating in security audits and assessments.
- Understanding and experience in developing, and delivering relevant and value-add operational metrics to support and provide visibility into the GSOC program.
- Communicate in English: write clearly and speak authoritatively to different audiences (business leaders and engineers).
- Knowledge of new and emerging cybersecurity technologies, threats, and threat vectors.
- Knowledge and experience in designing, executing, and reporting threat hunting activities.
- Knowledge and experience around offensive security (ethical hacking) techniques to identify and mitigate/remediate vulnerabilities in the UKG environment.
- Knowledge and experience in cyber forensic procedures and how to extract information and generate reports in support of incident response and other advanced requirements.
Where we’re going
UKG is on the cusp of something truly special. Worldwide, we already hold the #1 market share position for workforce management and the #2 position for human capital management. Tens of millions of frontline workers start and end their days with our software, with billions of shifts managed annually through UKG solutions today. Yet it’s our AI-powered product portfolio designed to support customers of all sizes, industries, and geographies that will propel us into an even brighter tomorrow!
UKG is proud to be an equal opportunity employer and is committed to promoting diversity and inclusion in the workplace, including the recruitment process.
Disability Accommodation :
For individuals with disabilities that need additional assistance at any point in the application and interview process, please email UKGCareers@ukg.com
Similar Jobs
View All
1 Day ago
Python Developer
Information Technology
- Bangalore, Karnataka, India
We are looking for a highly skilled Python Developer to join our team in building and optimizing advanced AI/ML frameworks. As a Python Developer in our AI/ML team, you will be responsible for creating, implementing, and scaling innovative machine le...
1 Day ago
Web Developer
Information Technology
- 400000 - 400000 Indian Rupee - Yearly
- Bangalore, Karnataka, India
C#.NET Web Developer Location: On-site | Type:Experienced, In-Office Full-time, Permanent Required Experience: Min-2years and Max-3years CTC: ₹4LPASantronix is a team driven by passion for excellence in software srevices. We are looking forward to...
1 Day ago
LLM AI Engineer
Information Technology
- Bangalore, Karnataka, India
Summary Gainwell is seeking LLM Ops Engineers and ML Ops Engineers to join our growing AI/ML team. This role is responsible for developing, deploying, and maintaining scalable infrastructure and pipelines for Machine Learning (ML) models and Large La...
2 Days ago
Product Security Engineer
Information Technology
- 3 - 6 Yrs
- Noida
Role: Product Security Engineer
Experience: 3+ Years
Location: Noida
Job Description:
Security Specialist in areas of Security Vulnerability Assessment & Penetration Testing. Responsible for periodic assessment and implementation of remediation...
2 Days ago
Sr. DevOps Engineer
Information Technology
- 7 - 12 Yrs
- Mumbai
ComUnus is hiring for Sr. DevOps Engineer
No Of Position : 3
Exp. Req : 7+ Yrs
Work Location : Mumbai (Vikhroli)
Max NP : Immediate Joiners are preferred
Must Have Skills : AWS
Key Responsibilities:
1. 7+ years of Hands-On experience as De...
2 Days ago
Java FullStack developer
Information Technology
- Bangalore, Karnataka, India
Urgent opening for Java FullStack developer (Java+React)Job Title: Full Stack Developer (Java+ ReactJS)Experience: 5 – 10 YearsSalary: Up to 38 LPALocation: RemoteNotice Period:immediate to 15 days(take candidate who are in serving notice period only...
2 Days ago
Senior Data Analyst
Information Technology
- Bangalore, Karnataka, India
As a Data Analyst, you should be able to propose creative solutions to develop/solve a business problem. Should be able to recommend design and develop state-of-the-art data-driven analysis using statistical; understating of advanced analytics method...
2 Days ago
Refrigeration & Energy Systems - Data Analytics Engineer
Information Technology
- Bangalore, Karnataka, India
Join Energy Recovery and Help Build a Sustainable Future At Energy Recovery, we build products that help limit global temperature rise, reduce carbon emissions, provide safe drinking water for millions of people, and bring efficiency and sustainabil...
Talk to us
Feel free to call, email, or hit us up on our social media accounts.
Email
info@antaltechjobs.in