Brief Description
Title: SOC Analyst
Experience Range: 1-3 Years
Location: Bangalore (Hybrid/Remote)
Key responsibilities
- Analyse security incidents to identify the root cause.
- Investigate, document, and report on information security issues and emerging trends.
- Analyse Threat Intelligence sources for proactive identification of emerging threats.
- Participate in evaluating the security of monitored infrastructure systems and take part in recommending additional security solutions where appropriate.
- Participate in improving internal incident response processes.
- Assist with the creation and maintenance of Playbooks and Runbooks.
- Recommend enhancements to SOC security process, procedures, and policies.
- Provide vulnerability management and monitoring service to customers through vulnerability scanning tools.
- Integrate and share information with other analysts and other teams.
- Assist with reporting and documentation work as needed.
Required Skills And Qualifications
- Security monitoring experience with one or more SIEM technologies which is Microsoft Sentinel
- Tuning of SIEM environment and creation of additional monitoring rules.
- Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols.
- Strong understanding of Windows, Linux and cloud technologies.
- Good understanding of security solutions including SIEMs, Web Proxies, Anti-Virus, Firewalls, VPN, authentication providers and mechanisms, encryption, IPS/IDS.
- Good understanding of security incident management, malware management and vulnerability management processes.
- Attention to detail and quality.
- Should have MSSP Experience along with strong communication skills
- Comfortable to work in Rotational shifts
Desirable Skills And Qualifications
- AZ-500 Microsoft Azure Security Technologies and/or SC-200 Microsoft Security Operations Analyst
- Knowledge of Microsoft Kusto Query Language (KQL)
- Knowledge of Crowdstrike Falcon
- Prior experience with handling or managing Cyber Incident Response (NIST)
Familiarity with ITIL practices regarding incident, problem and change management
