Security Specialist

Join our Team
As the tech firm that created the mobile world, and with more than 54,000 patents to our name, we've made it our business to make a mark. When joining our team at Ericsson you are empowered to learn, lead and perform at your best, shaping the future of technology. Are you in?
Come, and be where it begins.
About this opportunity:
At Ericsson, we are now looking to hire an IT Security Professional. The primary role of the successful candidate will be to protect the integrity and privacy of our information assets. This will be achieved by ensuring the provision of dependable IT security operations, expert guidance, effective solutions, and consistent support. All these services will adhere meticulously to IT Security Requirements and promote compliance with all relevant internal/external regulations, standards, and laws.
What you will do:
We are now looking for a SOC analyst in our global Cyber Defense Center (CDC).
We detect and respond to cyber attacks originating from external threat actors and ensure we are one step ahead of adversaries. Our aim is to identify their plans and means to execute them, block and disrupt their execution, and remove their presence from within Ericsson. CDC's focus is on sophisticated antagonistic threat actors (APT's) who can do the most harm to Ericsson as a company. Our focus is not on cyber hygiene.
The SOC provides 24/7 cyber security monitoring, triage, incident response, and detection engineering focusing on a wide range of threat actors, finding the signal in the noise and responding to the bulk of malicious activities. The SOC collaborates with the other units in the CDC:• CDC Threat Intelligence, which compiles, analyzes and provides geopolitical and cyber threat intelligence to Ericsson and CDC. • CDC Incident Response and Threat Hunting, which focuses on advanced persistent threats (APTs).• CDC AI, which ensures AI is leveraged to the fullest in automating cyber defense activities and supports security analysts, incident responders, threat hunters, etc. This unit is also specialized in incident response of AI supported and AI native attacks.• CDC Red Team, which conducts adversary simulation assignments attacking Ericsson impersonating APT's.• CDC IT, which operates CDC's dedicated IT environments and executes IT projects to ensure CDC has outstanding security monitoring coverage and data quality, and whatever IT ability is required to respond to cyber incidents.• CDC Process & Governance, which manages CDC's process universe, coordinates incident response, conducts vendor relationship management, etc.
The skills you bring
• Have around 6 to 10 years of experience and expertise in triage, response and detection engineering in SOCs• Have thorough knowledge of how to use EDR/ITDR/cloud security/SIEM/exposure management, etc. tooling (preferably CrowdStrike Falcon) to make quality judgements on false/true positives and malicious/non malicious• Have general technical knowledge of a broad area of technologies such as cloud (AWS, and/or GCP and/or Azure), Linux, Windows, network, identity, etc. and have deep technical knowledge of at least one of these technologies• Having a good understanding of threat actor TTP's, can recognize the markings of these in telemetry and logs, and know where to look next to validate or dement whether the activity is true or false positive, and whether it is malicious• Having a strong ambition and drive to catch threat actors, combined with a positive can-do attitude to continuously learn and improve yourself and how we work. You are never complacent• Are stress tolerant, grounded and in control even during crisis situations when you encounter live threat actors or when attack campaigns overwhelm the SOC. You know what to do, keep your head cool, work on the problem and collaborate with the team since you know we're all in this together
You need to embody a merit-based, results-driven mindset, unencumbered by other topics competing for mental bandwidth. This role currently operates within a 24/7 rotational shift model. As the organization planning to transition towards a Follow-the-Sun model, weekend support coverage will continue to be managed by the India team. Given the collaborative and operational nature of the role, team members are expected to work primarily from the office environment.
Why join Ericsson?At Ericsson, you'll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what's possible. To build solutions never seen before to some of the world's toughest problems. You'll be challenged, but you won't be alone. You'll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.
What happens once you apply? Click Here to find all you need to know about what our typical hiring process looks like.Encouraging a diverse and inclusive organization is core to our values at Ericsson, that's why we champion it in everything we do. We truly believe that by collaborating with people with different experiences we drive innovation, which is essential for our future growth. We encourage people from all backgrounds to apply and realize their full potential as part of our Ericsson team. Ericsson is proud to be an Equal Opportunity Employer. learn more.
Primary country and city: India (IN) ||
Req ID: 784403