Senior Security SOC Analyst

Job Title : Senior Security SOC Analyst

Location : Bengaluru, Chennai

Experience : Above 5+Skills

Skills : SIEM,Logrythm,

Job Description :

ESSENTIAL DUTIES AND RESPONSIBILITIES :

• Implement and perform service delivery of Security Operating center

• Conduct and lead incident response activities (triage, root cause analysis, escalations, notifications, communication, etc.) resulting from Information Security incidents consistent with Incident Response processes and procedures.

• Perform in-depth data analysis on various data and media types through the application of advanced methods, tools, and research techniques.

• Respond to, report on, and track security events reported to the SIEM, system and event logs, and other sources which require further analysis.

• Facilitate and lead meetings or discussions pertaining to security issues or potential threats to determine necessary or improved defensive measures or response actions.

• Provide SME leadership throughout the incident response lifecycle.

• Establish and leverage external relationships to obtain cyber and InfoSec threats with context for how it impacts MFX and its clients.

• Monitor internal and external threats; examine logs, events, and alerts generated by multiple platforms for anomalous activity, evidence of security incidents, and other error conditions that may constitute a breach in security or a degradation of integrity or confidentiality of our systems and data.

• Provide forensic support as needed or required for security incidents, potential or adjudicated.

• Provide mentorship and technical guidance to less experienced security analysts.

• Provide input, trends or analytical support to discover anomalous traffic, behaviors or patterns related to new threat activity, policy violations, etc.

• Leverage scripting skills to develop tools for the automation of security processes using Python, Perl, Bash, and PowerShell.

• Work with a wide variety of security tools, both network and system based, as needed.

• Participate in internal projects and initiatives, researching and recommending appropriate security solutions.

• Document processes, policies, reports and procedures as require.

 Knowledge and Skills:

• The successful candidate will have a proven track record 6- 8 years in information security derived from an all-round Information Technology background and SOC/SIEM experience and possess a combination of the following skills, and competencies: ·

• Good working knowledge of Windows operating systems, Linux, networking, LogRhythm, RSA Net witness, troubleshooting, and security strategies. ·

• Solid understanding of additional security technologies / disciplines such as EDR, Palo Alto and Juniper firewalls, intrusion prevention, encryption, threat analysis, and vulnerability assessment.

• Comfortable with managing complex, enterprise-scale logging, including ensuring reporting and alerting is appropriate.

• Strong analytical, documentation, and communication skills, both oral and written

• Good team working skills and ability to work in a distributed global team environment.

• Strong analytical and problem-solving skills.

• Self-motivated, proactive and with determination to achieve goals.

• Proven business skills including effective oral and written communication, issue resolution, project management, and self-motivation.

• Experience with industry recognized SIEM solutions such as LogRhythm, Azure Sentinel

• Relevant security certifications such as CEH, GIAC, GSEC, CISSP

 Technical Skills:

• Exposure to SIEM Alert monitoring and management for multiple SIEM Products

• Working knowledge of at least 3 of the following technologies.

o SIEM tools preferably LogRhythm, Azure Sentinel

o Nessus Vulnerability Assessment

o EDR, EPP, Network Security, Cloud Security, DLP, Encryption, proxy.

• Understanding of alerts from other monitoring systems e.g. DLP, WAF, Anti APT, DAM etc.

• Excellent knowledge of Intrusion Detection (deep TCP/IP knowledge, and Cyber security), various operating systems (Windows/UNIX), and web technologies (focusing on Internet security).

• Ability to read and understand packet level data. Intrusion detection and prevention and Network Security Products (IDS/IPS, firewalls, etc) Host Security Products (HIPS, AV, scanners, etc)

• Knowledge of cutting-edge threats and technologies effecting Web Application vulnerabilities and recent internet threats.