01Overview
Location : Navi Mumbai, Maharashtra, India
Mode : Work from office for 5 days
Shifts : Rotational
Interview Mode : Virtual (2 Technical Rounds)
Position Overview
We are seeking a highly skilled and motivated Security Operations Center (SOC) Security Analyst to join our cybersecurity team. The successful candidate will be responsible for monitoring security alerts, conducting real-time incident triage, and leading deep-dive investigations to protect our infrastructure from sophisticated cyber threats.
Key Responsibilities
- Monitor security alerts and events from various sources including SIEM, EDR, IDS/IPS, and cloud security platforms.
- Conduct real-time and retrospective security event analysis to identify suspicious behavior and potential threats.
- Execute initial triage and in-depth investigation of security incidents.
- Develop and maintain incident response procedures, threat detection use cases, and runbooks.
- Collaborate with internal teams to investigate security events, perform root cause analysis, and implement corrective actions.
- Participate in threat hunting activities and contribute to the enhancement of detection capabilities.
- Support tuning and maintenance of SIEM rules, alerts, and dashboards.
- Manage SOC documentation and reporting requirements.
- Stay current with the latest cybersecurity threats, trends, tools, and best practices.
- Participate in security assessments and audits as required.
Requirements & Qualifications
- Strong understanding of network protocols, operating systems (Windows, Linux), and cloud environments (Azure, GCP, AWS).
- Practical experience with SIEM tools -Azure Sentinel.
- Familiarity with threat intelligence platforms, endpoint detection and response (EDR), and malware analysis.
- Solid grasp of common attack vectors, tactics, and techniques.
- Comprehensive knowledge of incident response methodologies.
- Proven ability to analyze logs from various sources and correlate events for meaningful insights.
- Robust analytical and problem-solving skills with the ability to work under pressure during critical incidents.
- Good written and verbal communication skills for technical documentation and incident reporting. .
