Soc Analyst 1

Role & responsibilities

A 24x7 shift based schedule to continuously monitors the alert queue

• Triage security and device alerts
• Receives phone calls from clients and create necessary ticket for the incident or request and

channel it to the required team for action

• Collects data and context necessary to initiate investigation over to level 2 security analysts
• Follows alerts and incidents playbooks/runbooks
• Responsible for maintaining access to all security tools required for security investigation
• Primarily responsible for security monitoring, detection, response and client care
• Ensure incident identification, assessment, reporting, communication, mitigation and

monitoring

• Ensure compliance to SLA, process adherence and process improvements to achieve operational

objectives

• Revise and develop processes to strengthen the current Security Operations Framework, review

policies and highlight the challenges in managing SLAs

• Coordination with stakeholders, build and maintain positive working relationships with them

Preferred candidate profile

Proficient in Incident Management and Response

• Experience in security device management and multiple SIEM platforms
• In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors,

risk management, incident management, etc.

• Experience in MSSP environment
• Knowledge of various operating system flavors including but not limited to Windows, Linux,

Unix

• Knowledge of applications, databases, middleware to address security threats
• Proficient in preparation of reports, dashboards and documentation
• Excellent communication and leadership skills
• Experience in performing vendor management
• Ability to handle high pressure situations with key stakeholders
• Good Analytical skills, Problem solving and Interpersonal skills
• CISSP and GIAC certifications preferred