Experience
5 - 7 yrs
Salary (CTC)
₹6.2L - ₹9.2L
Job Location
Hyderabad, India
Vacancy
1
Designation
Service Delivery Leader
Job Type
ONSITE
Job Description
Job Title: NG SIEM Analyst L2
Location: Client Location, Hyderabad
Experience Required:
Certifications Preferred: CEH, ArcSight Admin SIEM product certifications
Role Overview:
We are looking for an experienced L2 NG SIEM Analyst to support the day-to-day operations of our Next-Gen SIEM environment (SIEM + SOAR + UEBA). The candidate will be responsible for monitoring dashboards, responding to alerts, performing preliminary investigations, and supporting integrations and routine operational tasks under the guidance of L3 resources.
Key Responsibilities:
- Monitor NG SIEM (SIEM + SOAR + UEBA) consoles, dashboards, and alerts; provide timely responses to security incidents.
- Assist in incident triage, classification, and escalation to L3 team based on severity.
- Perform preliminary analysis of security events and provide recommendations for closure or mitigation.
- Support the integration of log sources such as firewalls, endpoint security tools, AD, WAF, antivirus, patch management tools, ERP systems, and custom applications.
- Monitor health status of system components and raise issues to L3 team when necessary.
- Assist in the creation and fine-tuning of use cases/playbooks/reports and alert rules under the guidance of the L3 team.
- Support custom parser and connector development in collaboration with the L3 team.
- Work with L3 team on reducing false positives by reviewing correlation rules and configurations.
- Follow Standard Operating Procedures (SOPs) and assist in documentation updates.
- Support the onboarding of new log sources and data validation post-integration.
- Provide timely support for access-related requests and permissions within the NG SIEM solution.
- Perform routine tasks such as backup monitoring, report generation, and compliance checks.
- Participate in Cyber Drills and tabletop exercises as part of continuous learning and SOC readiness.
- Maintain audit and incident logs as per company policy and assist during audits with required data and documentation.
- Stay updated on cyber threat trends and assist in implementing recommendations for improved detection and response.
- Escalate unresolved technical issues to the L3 team and support troubleshooting under guidance.
Required Skills:
- Strong working knowledge of at least one NG SIEM platform (ArcSight).
- Familiarity with SOAR and UEBA concepts and basic operational understanding.
- Basic experience in writing and managing correlation rules, alerts, and queries.
- Understanding of threat intelligence and incident response lifecycle.
- Familiarity with MITRE ATT&CK and NIST frameworks.
- Hands-on experience with security logs from Windows/Linux servers, network devices, security appliances, and cloud infrastructure.
- Working knowledge of scripting or regex is a plus.
- Good analytical, documentation, and communication skills.
Soft Skills:
- Excellent problem-solving and troubleshooting skills.
- Ability to work under pressure and meet deadlines.
- Strong team collaboration and willingness to learn from senior team members.
- Strong communication and incident documentation/reporting ability.