ASSPL Hiring for Investigations Manager at Bengaluru, Karnataka, India Full Time

Job Description

Basic Qualifications:

• 5+ years of experience in Security Intelligence domain specialized in Threat Intelligence and Vulnerability Assessment.
• Bachelor’s degree in Information Technology, Information Security/Assurance, Engineering, or related field of study.
• Expertise in industry leading Threat Intelligence products implementation & administration.
• Should understand the Information Security basics well, knowledge of multiple domains of Information Security is a must.
• Knowledge of latest cyber-enabled and cyber-facilitated fraud/scam trends and tactics used by cybercriminals, including social engineering tactics.
• Ability to normalize and analyze large structured and unstructured datasets including but not limited to cyber data, electronic media and fraud system data in support of cybercrime root cause analysis.
• Knowledge of malicious tools used by cyber adversaries to target the E-commerce sector including but not limited to Trojans, malware, mobile malware, web injects, and phishing kits.
• Experience with intelligence analysis processes, including Open Source Intelligence (OSINT) and closed source intelligence gathering, social media analysis, source verification, data fusion and link analysis.
• Basic knowledge of security network architectures (e.g. Firewalls, DMZ, proxies, DNS, web and mail servers) and the principles of network security.
• Familiarity with Python/Perl/Bash scripting and database languages such as SQL.
• Ability to operate and thrive in a challenging and fast moving business environment and accept and embrace change.
• Strong verbal and written communication skills, attention to detail and strong organizational skills.

: We are looking to hire an insightful, results-oriented Investigations Manager to work as part of strategic investigation team (SIT) of India Security & Loss Prevention (IN SLP) function in Amazon India. The mission of the India SLP team is to mitigate security and operational risks to the associates, data, physical assets & inventory. IN SLP team ensures smooth run of the day-to-day business operations by protecting against various threats and by managing security and loss prevention risks, thereby ensuring a safe and secure work environment. This is achieved by preventing the security related risks and vulnerabilities as early as possible; by intervening in unfolding incidents and exposures in order to minimize any negative impact; and by investigating thoroughly security related incidents in order to identify and remove root causes and to prevent re-occurrence.
Investigations manager , working with Security & Loss Prevention (SLP) team, will implement the investigative framework for Amazon SLP Operations and work with all stakeholders to mitigate risk of misuse of customer credentials, social engineering fraud and cyber related incident targeting Amazon. This person will be an operational subject matter expert on cybercrime investigations, vulnerability assessment of the various tools used in the network and have the ability to share their expertise with cross functional leadership/stakeholders in Amazon. Investigations Manager is a key member of the SIT and reports to the Investigations Program Manager.
The ideal candidate for the role will have demonstrated the ability to work in all disciplines, at all levels; from technology research to open source intelligence and cyber security related incidents management.
Responsibilities:

• Monitor various channels including hundreds of open data sources, industry research, and social media platforms to provide insights about Latest Vulnerabilities, Prominent breaches, Malware Campaigns, Hacktivism Campaigns, Indicators of Compromise and Security Highlights.
• Information gathering, analyses, contextualization and sharing with customers for the open risks with the potential to impact them negatively. Triage and analyze intelligence related to cybercrime threats targeting Amazon customers
• Perform daily review of cyber threat warnings, bulletins, alerts, and incident reporting documentation and databases.
• Conduct and communicate analysis into cyber threat campaigns, threat actors and threat evolution, placing into context the resulting current and future threat to Amazon.
• Propose and implement improvements to the landscape of security safeguards, including technologies, systems and associated processes and procedures.
• Maintain strong relationships with industry partners and law enforcement colleagues to enable Amazon to tackle cybercrime at an industry level and work closely with InfoSec team, tool owners, and technical teams.
• Identify potential malicious activity from memory dumps and tool access logs.
• Demonstrated capability to analyze and coherently present complex threat intelligence information in a meaningful way to drive customer change and prioritize work streams.
• Interact and assist other investigative teams within organization on time sensitive, critical investigations.
• Contribute to the growth of the team’s technical capability and understanding of cyber-enabled fraud by utilizing (learning if necessary) suitable tools and analysis.
• Industry certifications such as CISSP, CISM, and CEH are preferred.