SOC Analyst

Brief Description

Title: SOC Analyst

Experience Range: 1-3 Years

Location: Bangalore (Hybrid/Remote)

Key responsibilities

• Analyse security incidents to identify the root cause.
• Investigate, document, and report on information security issues and emerging trends.
• Analyse Threat Intelligence sources for proactive identification of emerging threats.
• Participate in evaluating the security of monitored infrastructure systems and take part in recommending additional security solutions where appropriate.
• Participate in improving internal incident response processes.
• Assist with the creation and maintenance of Playbooks and Runbooks.
• Recommend enhancements to SOC security process, procedures, and policies.
• Provide vulnerability management and monitoring service to customers through vulnerability scanning tools.
• Integrate and share information with other analysts and other teams.
• Assist with reporting and documentation work as needed.
  
  

Required Skills And Qualifications

• Security monitoring experience with one or more SIEM technologies which is Microsoft Sentinel
• Tuning of SIEM environment and creation of additional monitoring rules.
• Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols.
• Strong understanding of Windows, Linux and cloud technologies.
• Good understanding of security solutions including SIEMs, Web Proxies, Anti-Virus, Firewalls, VPN, authentication providers and mechanisms, encryption, IPS/IDS.
• Good understanding of security incident management, malware management and vulnerability management processes.
• Attention to detail and quality.
• Should have MSSP Experience along with strong communication skills
• Comfortable to work in Rotational shifts
  
  

Desirable Skills And Qualifications

• AZ-500 Microsoft Azure Security Technologies and/or SC-200 Microsoft Security Operations Analyst
• Knowledge of Microsoft Kusto Query Language (KQL)
• Knowledge of Crowdstrike Falcon
• Prior experience with handling or managing Cyber Incident Response (NIST)
  
  

Familiarity with ITIL practices regarding incident, problem and change management