Experience
4 - 6 yrs
Job Location
India
Vacancy
1
Designation
SOC Analyst
Job Type
Not specified
Job Description
SOC L2 - Procain Consulting & Services SOC L2 SOC L2 Job Code:
J ob Responsibilities:
Perform monitoring, identification, investigation, documentation, resolution and reporting of security alerts through prioritization of events based on risk/exposure.
Analyze Endpoint Detection and Response (EDR), Network, Cloud and other traffic and log data for potential threats or vulnerabilities.
Generating tickets and incident reports to external clients and Tier 3 analysts.
Remediate and apply lessons learned to security incident investigation and resolution.
Develop processes that align with enterprise incident response activities and coordinate closely with other teams within the Security Operations Center.
Investigate suspicious activities and content and prevent them.
Follow strict security and SOC guidelines and SOPs.
Threat hunting, Threat intelligence, deep investigation of alerts.
Identifying the new use cases.
Strong analytical skills to assess the alerts .
Integrate new logging sources and build playbooks to properly triage and respond to security incidents while reducing the time needed to analyze each event.
Assess, design, and improve SOC processes and workflows with a focus on integrating automation through Security Orchestration, Automation and Response (SOAR) tools and technologies.
Create custom content to enhance capabilities of security operations Center.
Create custom analytics, dashboards, and reports.
Respond to customer or Tier 1 analyst tickets within target objectives.
Create new detection rules.
Perform monitoring, identification, investigation, documentation, resolution and reporting of security alerts through prioritization of events based on risk/exposure.
Analyze Endpoint Detection and Response (EDR), Network, Cloud and other traffic and log data for potential threats or vulnerabilities.
Generating tickets and incident reports to external clients and Tier 3 analysts.
Remediate and apply lessons learned to security incident investigation and resolution.
Develop processes that align with enterprise incident response activities and coordinate closely with other teams within the Security Operations Center.
Investigate suspicious activities and content and prevent them.
Follow strict security and SOC guidelines and SOPs.
Threat hunting, Threat intelligence, deep investigation of alerts.
Identifying the new use cases.
Strong analytical skills to assess the alerts .
Integrate new logging sources and build playbooks to properly triage and respond to security incidents while reducing the time needed to analyze each event.
Assess, design, and improve SOC processes and workflows with a focus on integrating automation through Security Orchestration, Automation and Response (SOAR) tools and technologies.
Create custom content to enhance capabilities of security operations Center.
Create custom analytics, dashboards, and reports.
Respond to customer or Tier 1 analyst tickets within target objectives.
Create new detection rules.
Qualifications:
Proven experience in a SOC with at least 4-6 years of experience.
Understanding of Managed Security Services.
Well versed with Incident Response Framework.
Experience with Endpoint Detection and Response (EDR) tools.
Experience with an industry leading SIEM technology (SIEM administration will be a plus).
Understanding of key IT/Cybersecurity concepts (Network Security, Security Operations & Administration, Managed Detection and Response, Incident Response & Recovery, Vulnerability Management, etc.)
Good interpersonal skills to interact with customers, team members and support personnel.
Strong analytical and problem-solving skills for investigating security issues.
Strong written and verbal communication skills
Ability to earn trust, maintain positive and professional relationships, and strengthen our culture of inclusion.
Motivated self-starter
Willing to work in 24*7 shifts on rotation basis and office based Bangalore location.
Proven experience in a SOC with at least 4-6 years of experience.
Understanding of Managed Security Services.
Well versed with Incident Response Framework.
Experience with Endpoint Detection and Response (EDR) tools.
Experience with an industry leading SIEM technology (SIEM administration will be a plus).
Understanding of key IT/Cybersecurity concepts (Network Security, Security Operations & Administration, Managed Detection and Response, Incident Response & Recovery, Vulnerability Management, etc.)
Good interpersonal skills to interact with customers, team members and support personnel.
Strong analytical and problem-solving skills for investigating security issues.
Strong written and verbal communication skills
Ability to earn trust, maintain positive and professional relationships, and strengthen our culture of inclusion.
Motivated self-starter
Willing to work in 24*7 shifts on rotation basis and office based Bangalore location.
Dependable partner for all your Information Security and IT Infrastructure Management Services requirement.
Address
- First Floor, Rathi Legacy-
Rohan Tech Park,
Seetharampalya - Hoodi Road,
Doddanakundi Industrial Area 2,
Seetharampalya, Hoodi,
Bengaluru, Karnataka 560048
No Referrers Available
There are currently no referrers available for this job. You can still apply, will let you know once there is any referrer available.