Quezon City, Metro Manila, Philippines
46 days ago
Senior Security Incident Response Analyst

Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services.  Our worldwide team helps over 3 million companies, more than 1,300 financial institutions and over 600 million cardholders grow with confidence and achieve amazing results.  We are driven by our passion for success and we are proud to deliver best-in-class payment technology and software solutions.  Join our dynamic team and make your mark on the payments technology landscape of tomorrow. 

Job Description:

Assist Analysts in performing front line accurate and precise real-time monitoring of alerts.

Acquire and develop  skills in analysis correlation of logs and alerts from a multitude of security devices.

Acquire and develop skills to identify intrusion activity by leveraging alert data from multiple sensors and systems and determine priority for response.

Support higher tier analysts as requested

Other duties as assigned

Responsibilities:

Participate in the activities related to the security of the company's systems and Internet site, protecting them from access by hackers who could compromise the company's operations.

 

Perform front line accurate and precise real-time monitoring and analysis correlation of logs/alerts from a multitude of security devices with a focus on the determination of whether said events constitute security incidents.

Identify intrusion activity by leveraging alert data from multiple sensors and systems and determine priority for response

Serve as a primary contact point for reporting potential security events

Document security incidents as identified in the ticketing system

Analyze and assess security incidents and escalate to Tier 2

Analyze simple events and resolve

Provide initial assessment on complex events and escalate to POC based on playbooks

Triage, document, and participate in all incident related calls

Monitoring of SIEM system health, data feeds and Infrastructure

Monitor, Triage, and Response of GSOC Mailbox

Collection of data and context necessary to initiate Level 2 escalation (if needed)

Participate in various exercises, i.e: Purple team, Tabletops

Follow steps documented in SOP, playbook

Identify false positives, gather initial information and tune

Support higher tier analysts as requested

Complete regular tasks as assigned

Engage other teams in Incident Management Calls/Meetings and actively participate by taking timelines and calling other stakeholders as needed.

Contribute to Playbooks creation and review and other documentation necessary for smooth daily operations of GSOC

Qualifications:

Must be fluent in both written and speaking in English.

B.S. in Computer Science, MIS, or related degree with 2-4 years of related experience in Information Security or an equivalent combination of education, training and experience in intrusion monitoring, analysis, and escalation experience.

Basic understanding of operating systems: e.g. Windows, UNIX, and application servers.
-Windows and Linux event log analysis
-Security Information and Event Management (SIEM) (envision)
-IDS/IPS

Security+, CySA+, CEH Certification (is an advantage)

Basic understanding of network protocols and network traffic analysis

Experience in Service Support Ticketing Systems.

Proficient in G Suite

Strong problem solving and follow-through abilities.

Ability to maintain a professional demeanor when dealing with sensitive issues and information

Ability to work under pressure and engage with other stakeholders.

2 year experience in and understanding of ports, protocols, system hardening and system functions analysis as it relates to network security

2 year experience in and understanding of information security principles as it relates to system and network security

2 year experience in monitoring and maintaining system, network and security solutions

2 year experience in and knowledge of Security Incident Response Management

2 year experience in inbound and outbound handling of calls.

Global Payments Inc. is an equal opportunity employer.

Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law. Those applicants requiring reasonable accommodation to the application and/or interview process should notify a representative of the Human Resources Department.

Confirm your E-mail: Send Email