Associate D&T Analyst – Cyber Security, Incident Response

COMPANY OVERVIEW

We exist to make food the world loves. But we do more than that. Our company is a place that prioritizes being a force for good, a place to expand learning, explore new perspectives and reimagine new possibilities, every day. We look for people who want to bring their best — bold thinkers with big hearts who challenge one another and grow together. Because becoming the undisputed leader in food means surrounding ourselves with people who are hungry for what’s next.

OVERVIEW

Be on the front line of defending General Mills. As an Associate Analyst in our Cyber Security Incident Response team, you will investigate real threats such as phishing, malware and compromised accounts, and help stop them before they affect our people, systems and brands.You will learn from experienced responders, get hands-on with enterprise-grade investigation and automation tools.Every day you will work with fellow analysts and team leads, our detection engineering, technology teams and business partners across the globe.

KEY ACCOUNTABILITIES

• Monitor security information and event management (SIEM) and other tools for potential threats, intrusions or compromises.

• Investigate alerts on reported incidents, including phishing and Windows endpoint compromise.

• Analyze malware in a sandbox environment to understand its impact and extract key indicators of attack and compromise.

• Contain threats quickly and correctly, achieving the defined containment time targets.

• Escalate events according to the General Mills Cybersecurity Incident Response Plan and the defined escalation path, handing over cases at every shift change.

• Perform peer review of events for open and closed case reviews.

• Participate in detection fine-tuning and in projects that streamline our processes, including automation.

• Make timely, high-quality decisions and collaborate across Cyber and other functional teams.

• Create better solutions through tireless curiosity and innovation, stretching beyond your area of expertise.
  

MINIMUM QUALIFICATIONS

• Education: Full-time graduation from an accredited university (mandatory, this is the minimum education criterion and cannot be altered).

• Experience: 2-4 years of related work experience, including hands-on experience with incident response processes and tools to detect, analyze, respond to and contain cyber security threats quickly and correctly.

• Technical Skills: SIEM and security orchestration, automation and response (SOAR) technologies, networking fundamentals and protocols, network security (IDS/IPS, firewalls) and endpoint detection and response, cyber security principles and the MITRE ATT&CK framework, deep understanding of phishing tactics and Windows endpoint investigation, forensic techniques to analyze threats, including malware, and extract key indicators of attack and compromise, knowledge of the tools and techniques attackers use to gain unauthorized access to systems.

• Soft Skills: Good communication skills, quick learner with good analytical skills, action-oriented and agile in incident response, able to get things done both independently and in a collaborative, team-oriented environment.

• People Management: Not required. This is an individual contributor role.

• Work Requirements: Ability to work in a 24x7 facility on rotating shifts, on-site in Mumbai.

PREFERRED QUALIFICATIONS

• Certifications such as Certified Ethical Hacker (CEH), CompTIA Cybersecurity Analyst (CySA+) or EC-Council Certified Incident Handler (ECIH).

• Scripting skills (Python or PowerShell) and experience building automated response playbooks.

• Exposure to cloud security and to threat hunting or threat intelligence platforms.

• What sets exceptional candidates apart: broad IT knowledge and a strong instinct for knowing when to keep digging until the root cause is found.

ELIGIBILITY

Applicants must meet minimum age qualifications in the country in which the job is located.