Soc Analyst

SOC Monitoring Analyst

• Security monitoring and handling of security incidents generated by SOC tools like SIEM, EDR, etc., and triaging them as per established processes and defined SLA.
• Day-to-day coordination and collaboration with other IT groups, Information Security teams, and business units to handle requests and security incidents.
• Assist with incident response and investigation activities.
• Analyze breaches to identify root cause.
• Contribute to incrementally improving core security controls.
• Provide inputs to monitor, manage, and tune core security controls.
• Develop and deliver required metrics and reports.
• Contribute to process and procedure documentation for core security controls.

Qualifications & Experience

• 35 years of experience in information technology preferred.
• 13 years of information security experience across two or more risk management domains, such as network security, host / endpoint security, data security, incident response, security monitoring, vulnerability management, or application security.
• Good knowledge of TCP/IP, networking concepts, ports and protocols, and OSI layers.
• Understanding of network security infrastructure and components such as firewalls, IPS, proxy, WAF, EDR, SIEM, antivirus, and DLP.
• Knowledge of SIEM and log management platforms to perform complex security analysis.
• Knowledge of SIEM tools such as Splunk, IBM QRadar, ArcSight, or LogRhythm is preferred.
• Knowledge of Digital Shadows and ServiceNow is preferred.
• Demonstrated experience with multiple security controls across multiple security domains.