Job Description

Role: Security Analyst

Location: Kharadi, Pune, India

Life Unlimited. At Smith+Nephew, we design and manufacture technology that takes the limits off living.

The Security Analyst works on the detection and response for potential security incidents on the Smith & Nephew network, systems, and applications. This includes technical analysis and incident management, communications, and reporting. The role reports to the Global SOC Manager. The work includes partnering closely with other functions within Information Security, with outsourced tier 1 SOC functions, with the wider IT team including Service Desk, as well as with HR, Legal, Procurement, and other functions. The role interacts with end users and technical resolver teams within Smith & Nephew as well as outsourced suppliers.

What will you be doing?

• (70%) Execute alert and incident response activities following standard runbooks and processes, with work to include the initial triage and analysis, recording of the incident with all relevant details to high standards, documenting all containment and response actions.
• (10%) Utilizes Smith+Nephew technology platforms and security tools to conduct investigations such as threat hunting or other proactive investigations outside the incident process.
• (10%) Write comprehensive reports including assessment-based findings, outcomes, and propositions for enhancements such as new detection plays, new runbooks or playbooks, process improvements, or tuning detection rules.
• (5%) Mentoring and coaching other team members, sharing skills and experience to enable higher levels of performance.
• (5%) Provide technical subject matter expertise to projects and initiatives aimed at improving the capability and maturity of Smith & Nephew information security practises.

What will you need to be successful?

• Education: Bachelor´s degree or equivalent experience in Computer Science or related subject preferred.
• Licenses/ Certifications: Relevant entry- or mid-level security certifications are advantageous but not required. Job-specific training will be provided.
• Experience: At least 4 years of experience in IT information security role.
• This role will be based in Pune and will be working from office in Hybrid mode. Shift Timing (11AM - 8PM IST) Monday to Friday.
• 4+ years of experience as an Information Security Administrator or Engineer.
• Experience working hands-on with SIEM and EDR/XDR technologies for the identification and response to existing and emerging threats.
• Familiar with MITRE ATT&CK for the identification and mapping of attacker tactics, techniques, and procedures (TTPs). Familiarity with network models (OSI and TCP/IP), common network terminology and concepts, and network equipment.
• Must be able to correctly interpret logs for firewalls (including WAF and IDS/IPS), Windows and Linux operating system logs, AWS and Azure cloud logs.
• Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols.
• Understanding of industry frameworks such as MITRE ATT&CK, MITRE D3FEND, NIST CSFv2, and NIST SP800-61r2.
• Using SIEM (including scripted query languages) and EDR/XDR technologies, threat intelligence tools, and ITSM tools. Familiarity with AWS and Azure cloud technologies and cloud security standards (CSA or equivalent).
• Understanding of API security and familiarity with AI security concepts (such as NIST AI RMF). Familiarity with ITIL methodology and terminology.
• Excellent written and oral communication skills, service mindset, and analytical approach to problem solving.
• Ability to work independently without daily direction, balancing conflicting priorities, and effectively tracking and managing task completion to committed deadlines.

You. Unlimited.

We believe in crafting the greatest good for society. Our strongest investments are in our people and the patients we serve.

Inclusion + Belonging - Committed to Welcoming, Celebrating and Thriving. Learn more about our Employee Inclusion Groups on our website https://www.smith-nephew.com/

Other reasons why you will love it here!

• Your Future: Major Medical coverage + Policy exclusions and insurance non-medical limit. Educational Assistance.
• Work/Life Balance: Flexible Personal/Vacation Time Off, Privilege Leave, Floater Leave.
• Your Wellbeing: Parents / Parents in Law’s Insurance, Employee Assistance Program, Parental Leave.
• Flexibility: Hybrid Work Model (For most professional roles)
• Training: Hands-On, Team-Customized, Mentorship
• Extra Perks: Free Cab Transport facility for all employees, One Time Meal provided to all employees as per shift. Night Shift Allowances.

#YS1