Associate Consultant - CSOC , Cyber Crime
- Chennai, Tamil Nadu
- Permanent
- Full-time
- Utilize security information and event management (SIEM) tools to monitor, analyze, and respond to security events and incidents.
- Develop and maintain use cases, correlation rules, and alerts to enhance the detection capabilities of the SOC.
- Investigate security incidents, conduct root cause analysis, and provide recommendations for remediation and risk mitigation.
- Implement and fine-tune detection mechanisms, including signature-based detection, anomaly detection, and behavioral analysis.
- Collaborate with cross-functional teams, including threat intelligence analysts, incident responders, and system administrators, to identify and prioritize security use cases based on Renault Groups risk and threat landscape.
- Document use case logic, implementation details, and testing procedures to ensure consistency and repeatability.
- Analyze security events and incidents to identify patterns, trends, and potential indicators of compromise (IOCs).
- Conduct research on emerging threats, vulnerabilities, and attack techniques to inform the development of new use cases and improve existing ones.
- Monitor the dark web for mentions of the organization's assets, sensitive information, or potential threats.
- Analyze dark web intelligence to identify emerging threats, malicious actors, and security vulnerabilities relevant to the organization.
- Create and maintain documentation related to incident response procedures, playbooks, and standard operating procedures (SOPs).
- Stay current with emerging threats, vulnerabilities, and attack techniques to continually improve the Renault Group security posture.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
- Strong understanding of security information and event management (SIEM) concepts, log analysis, and security analytics.
- Experience in developing use cases, correlation rules, and alerts for SIEM platforms
- Knowledge of security frameworks and standards (e.g., MITRE ATT&CK framework, NIST Cybersecurity Framework, ISO 27001).
- Familiarity with scripting and programming languages (e.g., Python, PowerShell) for automation and tool development is a plus.
- Experience with dark web monitoring tools and techniques.
We find strength in our diversity and we are engaged to ensure equal employment opportunities regardless of race, colour, ancestry, religion, gender, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, etc. If you have a disability or special need requiring layout of the workstation or work schedule, please let us know by completing this form.In order to follow in real time the evolution of your applications and to stay in touch with us, we invite you to create a candidate account. This will take you no more than a minute and will also make it easier for you to apply in the future.By submitting your CV or application, you authorise Renault Group to use and store information about you for the purposes of following up your application or future employment. This information will only be used by Renault Group companies as described in the .