SOC SIEM Incident Management- Bangalore

Role & responsibilities

Experience

1. 3-7years of Information Security experience in Incident Management, Incident Response, Security Operations.
2. Experience managing security incidents within enterprise SOC environments.
3. Experience working with cross-functional technical and business teams during incident response activities.

Technical Knowledge

1. Good understanding of Incident Management and Incident Response lifecycles.

2. Hands-on experience with:

• Microsoft Sentinel
• Cortex XSOAR
• EDR Platforms (Microsoft Defender, CrowdStrike, etc.)
• SIEM and Security Monitoring solutions

3. Understanding of MITRE ATT&CK Framework, Cyber Kill Chain, and NIST Incident Response Framework.

4. Familiarity with Microsoft 365, Azure, and cloud security concepts.

5. Understanding of threat intelligence and threat hunting fundamentals.

6. Ability to review security alerts, indicators of compromise (IOCs), and investigation findings to assist response coordination.

Key Competencies

1. Incident Lifecycle Management

2. Major Incident Coordination

3. Severity Classification & Escalation

4. Stakeholder Communication

5. Sentinel / XSOAR / EDR Operations

6. SLA & KPI Management

7. Reporting & RCA

8. Threat Intelligence Integration

9. Process & Playbook Improvement

Preferred candidate profile

Certifications:

1. SC-200: Microsoft Security Operations Analyst
2. ECIH (preferred)
3. Security+
4. AZ-500