SOC Analyst

Title: SOC Analyst

Experience Range: 1-3 Years

Location: Bangalore (Hybrid/Remote)

Key responsibilities

• Analyse security incidents to identify the root cause.

• Investigate, document, and report on information security issues and emerging trends.

• Analyse Threat Intelligence sources for proactive identification of emerging threats.

• Participate in evaluating the security of monitored infrastructure systems and take part in recommending additional security solutions where appropriate.

• Participate in improving internal incident response processes.

• Assist with the creation and maintenance of Playbooks and Runbooks.

• Recommend enhancements to SOC security process, procedures, and policies.

• Provide vulnerability management and monitoring service to customers through vulnerability scanning tools.

• Integrate and share information with other analysts and other teams.

• Assist with reporting and documentation work as needed.

Required skills and qualifications

• Security monitoring experience with one or more SIEM technologies which is Microsoft Sentinel

• Tuning of SIEM environment and creation of additional monitoring rules.

• Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols.

• Strong understanding of Windows, Linux and cloud technologies.

• Good understanding of security solutions including SIEMs, Web Proxies, Anti-Virus, Firewalls, VPN, authentication providers and mechanisms, encryption, IPS/IDS.

• Good understanding of security incident management, malware management and vulnerability management processes.

• Attention to detail and quality.

• Should have MSSP Experience along with strong communication skills

• Comfortable to work in Rotational shifts

Desirable skills and qualifications

• AZ-500 Microsoft Azure Security Technologies and/or SC-200 Microsoft Security Operations Analyst

• Knowledge of Microsoft Kusto Query Language (KQL)

• Knowledge of Crowdstrike Falcon

• Prior experience with handling or managing Cyber Incident Response (NIST)

Familiarity with ITIL practices regarding incident, problem and change management