Information Security Engineer

Job description

Consultant - Cyber Defense Center (CDC) **Designation:** Consultant - Information Security Group **Location:** Bangalore **Department:** Information Security Group (ISG) **Reporting To:** CDC Manager / CISO Role Overview Tredence is seeking a Cyber Security professional to join its **Cyber Defense Center (CDC)** within the Information Security Group. The role focuses on **SOC governance, incident management, threat hunting, cyber threat intelligence, security monitoring, and continuous improvement of security operations**. The candidate will work closely with the Managed Security Services Provider (MSSP), internal stakeholders, customers, and regulatory bodies to strengthen the organization's cyber resilience. Key Responsibilities - Manage end-to-end cyber security incident response and investigations. - Govern and monitor MSSP-delivered 24x7 SOC operations. - Perform root cause analysis (RCA) for security incidents and drive corrective actions. - Ensure complete security telemetry visibility across the organization. - Implement and enhance SIEM, Threat Hunting, CTI, and Dark Web monitoring capabilities. - Monitor external security posture and coordinate risk remediation. - Develop and maintain Incident Management policies and procedures. - Conduct Cyber Security Tabletop Exercises (TTEs) and simulation exercises. - Coordinate with customers and regulatory bodies (e.g., CERT-In) on security incidents. - Create CDC metrics, dashboards, and executive reports for CISO reviews. - Evaluate emerging security technologies through Proof of Concepts (POCs). - Drive SOAR-based automation initiatives to improve SOC efficiency. - Contribute to centralized threat intelligence platforms and knowledge management. Required Technical Skills Security Operations & Incident Response - SOC Operations (24x7 environment) - Security Incident Management - Digital Forensics & Investigation - Evidence Handling & Chain of Custody - Root Cause Analysis (RCA) Threat Management - Threat Hunting - Cyber Threat Intelligence (CTI) - Dark Web Monitoring - IOC Correlation - CVE Analysis - Security Monitoring & Detection Engineering Security Frameworks - MITRE ATT&CK Framework - Lockheed Martin Cyber Kill Chain - ISO 27035 Incident Response - ISO 27001 - NIST Cybersecurity Framework - NIST 800-53 - PCI-DSS - HIPAA - SOC 1 / SOC 2 - SOX Controls Security Technologies - SIEM Platforms - SOAR Platforms - Security Automation - Threat Intelligence Platforms - Cloud Security (Azure, AWS, GCP) Preferred Certifications - CISSP - CISM - CCSP - ISO 27001 Lead Implementer / Lead Auditor - Microsoft Azure Security Certifications - AWS Security Certifications - Google Cloud Security CertificationsSoft Skills - Strong analytical and problem-solving abilities. - Excellent communication and stakeholder management skills. - Attention to detail. - Proactive and continuous learning mindset. - Self-driven, innovative, and collaborative approach. **Required Skills**