Cyber Security Spec IND [T500-26583]

About us:
We are a highly successful 190-year-old, Fortune 500 commercial property insurance company of 6,000+ employees with a unique focus on science and risk engineering. Businesses worldwide trust our expertise to protect their assets, relying on our comprehensive risk assessments and robust, engineering-based insurance solutions to safeguard against fire, natural disasters, and other perils. Serving over a quarter of the Fortune 500 and major corporations globally, we deliver data-driven strategies that enhance resilience, ensure business continuity, and empower organizations to thrive.

FM India is a strategic location for driving our global operational efficiency. Our presence in India allows us to leverage the country’s talented workforce and advance our capabilities to serve our clients better. We have diverse corporate functions that emphasize research, advanced technologies like AI and analytics, risk engineering, research, finance, marketing, HR, etc. working together to provide innovative solutions and nurture lasting relationships – from co-workers to clients.

Role Title: Cyber Security Spec IND
Position Summary:
Assists senior team members with performing the day to day operations and monitoring of security infrastructure technologies (such as SIEM, UEBA, Firewall, AV/EDR, DLP) used to prevent, detect, and/or respond to security incidents. These operational activities include monitoring and responding to cyber security alerts and incidents. Manages ticket queues and responds to operational incident tickets received from the service desk and processes change requests.

Job Responsibilities:
With guidance from senior team members, performs daily security event monitoring and subsequent investigation activities. In the event that a security incident has been found, follows enterprise incident response standard processes ensuring proper escalation and engagement of more senior team members, management, and other technical teams as appropriate.
With guidance from senior team members, supports efforts to implement 0% ongoing improvements to security policies and infrastructure configurations which improve the effectiveness and efficiency of X’s threat prevention, detection, and response services.
Under the direction of more senior team members, provides support for business and technology initiatives which require assistance from the security infrastructure services team.
Maintain familiarity with companies security standards and ensure that 0% technologies and security policies are implemented in support of those standards. Communicate any identified gaps to peers and management in a timely manner.
Is able to communicate and work as a team both within security infrastructure services and across other groups in support of goals and objectives.
Maintains clear concise and accurate documentation for processes and configurations. Ensure documentation is kept up to date and in the proper shared, accessible location.

Skill and Experience:
1-3 years of experience required to perform essential job functions.
Additional Experience Qualifier (optional): Minimum of one (1) year of experience in information technology, security administration, business analysis, risk, audit, compliance, computer forensics, network perimeter security or other related discipline.
Ability to communicate verbally and in writing
Ability to coordinate activities with team members and other stakeholders
Must have a strong work ethic, and a positive attitude
Ability to work independently or on a team Ability to multitask and change priorities with effective results
General knowledge of at least one of the following areas: operating systems, databases, systems, networks, application development Working knowledge of MS Office suite, especially Excel
PowerBI Preferred
Ability to leverage various sources of information articles, webinars, Internet, etc to gain accurate knowledge of current security threats, vulnerabilities and mitigating strategies to address them

Must Have Skills:
Security Event Analysis and Triage
Ability to review escalated alerts, analyze supporting evidence, and apply structured thinking to determine legitimacy, severity, and next steps under guidance.
Foundational Adversary and Attack Knowledge
Working understanding of common attacker behaviors and tactics, including familiarity with concepts such as phishing, credential abuse, lateral movement, and the MITRE ATT&CK framework.
Broad Technical Curiosity and Literacy
Exposure to enterprise technologies including endpoints, identity systems, cloud services, networking, email, and SaaS platforms, with the ability to follow attack paths across domains.
Data Loss Prevention and Insider Threat Exposure
Familiarity with DLP or insider threat alerting, including reviewing user behavior, contextual data, and supporting basic investigations and escalations.
Analytical and Automation Aptitude
Strong problem-solving skills, comfort working with data, and experience or interest in scripting and automation tools (e.g., Python, PowerShell, APIs). Ability to apply these skills to enhance and scale AI-assisted SOC operations.
GSEC/GCIH/Security+/BTL1/BTL2/CySA+/SC-200/CCTIA
Automation & Integration Mindset
Experience or interest in integrating AI agents with automation tools and enterprise systems (e.g., APIs, Power Automate, SIEM platforms). Ability to extend agent capabilities to support SOC use cases such as enrichment, triage support, and workflow orchestration.

Education and Certifications:
4 Year/ bachelor’s degree required.

Work location: Bengaluru
Show more Show less