Security Shift Analyst

Life Unlimited. At Smith+Nephew we design and manufacture technology that takes the limits off living. Security Shift Analyst works on the detection and response for potential security incidents on the Smith & Nephew network, systems, and applications. This includes technical analysis and incident management, communications, and reporting. The role reports to the Global SOC Manager.

The work includes partnering closely with other functions within Information Security, with outsourced tier 1 SOC functions, with the wider IT team including Service Desk, as well as with HR, Legal, Procurement, and other functions. The role interacts with end users and technical resolver teams within Smith & Nephew as well as outsourced suppliers. The working hours are Monday to Friday, US business hours (6 PM - 3 AM IST).

What will you be doing?

• (70%) Execute alert and incident response activities following standard runbooks and processes, with work to include the initial triage and analysis, recording of the incident with all relevant details to high standards, documenting all containment and response actions.
• (10%) Utilises Smith+Nephew technology platforms and security tools to conduct investigations such as threat hunting or other proactive investigations outside the incident process.
• (10%) Write comprehensive reports including assessment-based findings, outcomes, and propositions for enhancements such as new detection plays, new runbooks or playbooks, process improvements, or tuning detection rules.
• (5%) Mentoring and coaching other team members, sharing skills and experience to enable higher levels of performance.
• (5%) Provide technical subject matter expertise to projects and initiatives aimed at improving the capability and maturity of Smith & Nephew information security practices.

Location: Pune (Maharashtra)

Education: Bachelor's degree in Computer Science or related subject preferred.

Certifications: Relevant entry- or mid-level security certifications are advantageous but not required. Job-specific training will be provided.

What will you need to be successful?

• At least 4+ years of experience in a relevant Information Security role. Experience working hands-on with SIEM and EDR/XDR technologies.
• Familiar with MITRE ATT&CK, network models (OSI and TCP/IP), Windows and Linux OS logs, AWS and Azure cloud logs, web technologies and protocols.

Competencies: MITRE ATT&CK/D3FEND, NIST CSFv2, NIST SP800-61r2, SIEM/EDR/XDR, threat intelligence tools, ITSM tools, AWS/Azure cloud security, API security, AI security concepts (NIST AI RMF), ITIL methodology, excellent written and oral communication, ability to work independently.

You Unlimited.

We believe in crafting the greatest good for society. Our strongest investments are in our people and the patients we serve.

Inclusion + Belonging: Committed to Welcoming, Celebrating and Thriving., Learn more about Employee Inclusion Groups on our website (https://www.smith-nephew.com/).

Other reasons why you will love it here!

• Your Future: Major medical coverage + policy exclusions and insurance non-medical limit. Educational Assistance.
• Work/Life Balance: Flexible Personal/Vacation Time Off, Privilege Leave, Floater Leave.
• Flexibility: Hybrid Work Model (For most professional roles)
• Your Wellbeing: Parents/Parents-in-Law’s Insurance (Employer Contribution of 8,000/- annually), Employee Assistance Program, Parental Leave.
• Training: Hands-On, Team-Customized, Mentorship.