Advanced Systems Analyst - IT Security

Founded in 1920, Eastman is a global specialty materials company that produces a broad range of products found in items people use every day. With the purpose of enhancing the quality of life in a material way, Eastman works with customers to deliver innovative products and solutions while maintaining a commitment to safety and sustainability. The company’s innovation-driven growth model takes advantage of world-class technology platforms, deep customer engagement, and differentiated application development to grow its leading positions in attractive end markets such as transportation, building and construction, and consumables. As a globally inclusive company, Eastman employs approximately 13,000 people around the world and serves customers in more than 100 countries. The company had 2025 revenue of approximately $8.8 billion and is headquartered in Kingsport, Tennessee, USA. For more information, visit  www.eastman.com .   Role Description

An Information Technology & Business Shared Services presence is established in Hyderabad, India with the objective of providing information technology application development and support services.   Eastman is a Fortune 500 company leading the circular economy by improving the quality of life for consumers around the world. Cybersecurity Analyst I position is an individual contributor role that is focused on performing the execution and support pertaining to cyber security including network, email, endpoint, advanced persistent threat, insider risks etc. This role requires knowledge and experience in IT security to apply a solid understanding of concepts with practical applications to projects such as new security applications, implementation of security tools, support for existing security tools and security investigations.  Cyber Security Analyst I is acquiring higher level knowledge while working with a high level of supervision. Key Responsibilities

•    Monitor security log monitoring systems and triage security alerts to identify cyber threats.  •    Perform system and network incident response, containment, and recovery activities.  •    Participate in internal and external investigations and document results.  •    Monitor and investigate alerts from Data Loss Prevention (DLP), Insider Risk Management, and Communication Compliance technologies.  •    Analyze user activities involving sensitive data, including transfers to personal email, removable media, cloud storage, and collaboration platforms.  •    Assist in developing and tuning insider risk indicators, policies, and detection rules.  •    Participate in employee termination, resignation, and high-risk user monitoring activities.  •    Partner with Legal, Human Resources, Ethics & Compliance, Privacy, and Internal Audit teams during investigations.  •    Evaluate application security capabilities and recommend security requirements.  •    Present information and investigation findings to management as needed.  •    Respond to cyber threat activities while on call.  •    Support a global 24x7 operating model and coordinate investigations across multiple time zones. Basic Qualifications

•    Bachelor’s degree in computer science or related field, or equivalent experience.  •    2-5 years of experience in Digital Insider Risk investigations.  •    Experience investigating data exfiltration, policy violations, fraud, intellectual property theft, or employee misconduct.  •    Familiarity with Splunk or similar log aggregation/SIEM tools.  •    Familiarity with Microsoft 365 Purview Suite (eDiscovery, Insider Risk Management, Communication Compliance, DLP).  •    Understanding of cybersecurity concepts, incident response, and development/programming concepts.  •    Strong analytical, problem-solving, and communication skills. Preferred Qualifications

•    Experience with digital forensics, evidence handling,