Advanced Systems Analyst - IT Security

Role Description

An Information Technology & Business Shared Services presence is established in Hyderabad, India with the objective of providing information technology application development and support services.

Eastman is a Fortune 500 company leading the circular economy by improving the quality of life for consumers around the world. Cybersecurity Analyst I position is an individual contributor role that is focused on performing the execution and support pertaining to cyber security including network, email, endpoint, advanced persistent threat, insider risks etc. This role requires knowledge and experience in IT security to apply a solid understanding of concepts with practical applications to projects such as new security applications, implementation of security tools, support for existing security tools and security investigations.  Cyber Security Analyst I is acquiring higher level knowledge while working with a high level of supervision.

Key Responsibilities

•    Monitor security log monitoring systems and triage security alerts to identify cyber threats. 
•    Perform system and network incident response, containment, and recovery activities. 
•    Participate in internal and external investigations and document results. 
•    Monitor and investigate alerts from Data Loss Prevention (DLP), Insider Risk Management, and Communication Compliance technologies. 
•    Analyze user activities involving sensitive data, including transfers to personal email, removable media, cloud storage, and collaboration platforms. 
•    Assist in developing and tuning insider risk indicators, policies, and detection rules. 
•    Participate in employee termination, resignation, and high-risk user monitoring activities. 
•    Partner with Legal, Human Resources, Ethics & Compliance, Privacy, and Internal Audit teams during investigations. 
•    Evaluate application security capabilities and recommend security requirements. 
•    Present information and investigation findings to management as needed. 
•    Respond to cyber threat activities while on call. 
•    Support a global 24x7 operating model and coordinate investigations across multiple time zones.

Basic Qualifications

•    Bachelor’s degree in computer science or related field, or equivalent experience. 
•    2-5 years of experience in Digital Insider Risk investigations. 
•    Experience investigating data exfiltration, policy violations, fraud, intellectual property theft, or employee misconduct. 
•    Familiarity with Splunk or similar log aggregation/SIEM tools. 
•    Familiarity with Microsoft 365 Purview Suite (eDiscovery, Insider Risk Management, Communication Compliance, DLP). 
•    Understanding of cybersecurity concepts, incident response, and development/programming concepts. 
•    Strong analytical, problem-solving, and communication skills.

Preferred Qualifications

•    Experience with digital forensics, evidence handling, chain of custody, and user activity reconstruction. 
•    Experience analyzing User and Entity Behavior Analytics (UEBA) data. 
•    Knowledge of insider threat detection and investigation methodologies. 
•    Understanding of privacy regulations including GDPR, UK GDPR, and India DPDP Act. 
•    Experience working with stakeholders across Americas, EMEA, and APAC regions. 
•    Strong presentation and written communication skills, particularly for Legal, HR, and Compliance audiences. 
•    Ability to manage multiple initiatives in a team environment.