SOC Analyst

About Halma:

Halma is a global group of life-saving technology companies, driven by a clear purpose. We are an FTSE 100 company with headquarters in the UK and operations in 23 countries, including regional hubs in India, China, Brazil, and the US.

Our diverse group of nearly 50 global companies specialise in market leading technologies that push the boundaries of science and technology.

For the last 42 years, the combination of our purpose, strategy, people, DNA and sustainable business model has resulted in record long-term growth in revenues and profits and an increase in dividend by ≥ 5% every year– an achievement unrivalled by any company listed on the London Stock Exchange.

Why join us

We are a Great Place to Work® certified organisation, with an employee centric culture anchored on autonomy, trust, respect, humility, work-life balance, team spirit, and approachable leadership.

We offer a safe and respectful workplace, where everyone can be who they REALLY are, feel free to bring their whole selves to work and use their unique talents, knowledge, expertise, experiences, and backgrounds to create meaningful outcomes.

We nurture entrepreneurial spirits and empower them to think beyond the possibilities, to discover, shape and build their own unique stories. We promote and support non-linear career growth for the right talent.

We are simple, humble and approachable, and we believe in leadership at all levels to bring our purpose to life. Everyone at Halma India makes an impact, and so do you when you join us!

Position Objective:

• We are seeking passionate cyber security professionals for our 24/7 security operations team, who will provide support to Halma Group's centralized infrastructure.
• Perform real time monitoring on malicious activities, analyse logs looking for attack patterns to ensure infiltration attempts are identified and dealt in a timely manner.
• He/she will be responsible for managing technical support requests pertaining to Security devices integrated in Halma's infrastructure.
• Provide first line of support for Halma and its subsidiary company infrastructure security.

Responsibilities:

• Perform real time security monitoring and incident response activities across the networks, leveraging a variety of tools and techniques.
• Create and improve Incident Response Playbook.
• Perform post incident reviews to improve and tune Halma's incident response capability.
• Provide support to the team members while investigating alerts escalated by MSSP & work closely with Leads.
• Provide support in the area of Azure Active directory, Intune (conditional access/MDM), single sign on and Multifactor Authentication, Microsoft Defender for Endpoint, Microsoft Defender for Server, Office 365 email security.
• Monitor and respond to security incidents for Halma PLC and Subsidiary companies. Interact with end-users and IT Managers of Halma and Subsidiary companies during investigations, to raise awareness and training opportunities.
• Create and Maintain KB articles & SOPs for all the applications related to SOC to ensure security best practices in the team.
• Should be able to work on Incident and Security Reports Independently.

Critical Success factors:

• Successfully resolve security incidents, infrastructure support & service requests within SLA.
• Contribute to improving processes, systems and services provided by Halma IT.
• Identification of Security Risks and threats to the Group.
• Cyber security mindset is key and taking appropriate action on any cyber incident is the major aspect of this role.

Qualifications:

• Bachelor's in computer science/IT
• Preferred Certifications:

CompTIA Security+, CEH

Microsoft Security certifications like SC-200/SC-300/SC-400

• Desirable Certifications:

any SIEM certifications, any Network certifications

Experience:

• Total experience 2-3 years.
• Exposure to security technologies including Incident Response, Microsoft Defender, Azure Sentinel.
• Knowledge of network fundamentals TCP/IP, SSL/TLS, DNS, DHCP.
• Hands on experience to Microsoft technologies like 365 ATP Defender, Endpoint Manager (Intune- conditional access/MDM/MAM) and KQL knowledge.
• Any vendor firewall and Remote Access solutions.
• Good to have – Cato Networks (VPN and Firewall), Azure Active Directory,