Sr. Engineer - Captive Operations

Key Responsibilities:

Monitor security alerts and events using SIEM tools (DNIF, Splunk, QRadar, Azure Sentinel)

Identify, analyze, and classify security incidents based on predefined use cases

Perform initial triage of alerts to determine false positives vs genuine threats

Escalate validated incidents to L2/L3 analysts following incident response procedures

Create and update incident tickets with accurate documentation and timelines

Monitor endpoint, network, firewall, IDS/IPS, and antivirus alerts

Follow SOC runbooks, standard operating procedures (SOPs), and SLAs

Assist with basic threat intelligence enrichment (IP reputation, hashes, URLs)

Participate in shift handovers and daily SOC reporting

Maintain compliance with organizational security policies

Technical Skills:

Cybersecurity concepts (malware, phishing, brute force, DDoS, ransomware)

Networking fundamentals (TCP/IP, DNS, HTTP/HTTPS, ports, firewalls)

Operating systems: Windows & Linux basics.

Familiarity with SIEM tools (handson or academic exposure preferred)

Basic log analysis skills (Windows logs, firewall logs, web server logs)

Understanding of MITRE ATT&CK framework (basic level)

Educational Qualifications:

BE/B.tech in: Computer Science/Information Technology

Years of Experience: - Relevant 4 years

Certifications: -

CEH (Certified Ethical Hacker)

Any SIEM certification

Location:- Mumbai