IValue - Senior Security Operations Analyst - SIEM Tools (4-6 yrs)

Title : Senior SOC Analyst

Experience : 4-6 Yrs

Location : Bangalore

Key Responsibilities :

- Monitor security alerts and events generated by SIEM, IDS/IPS, firewalls, and other security tools.

- Analyze security logs and identify suspicious activity, including malware infections, intrusion attempts, and data breaches.

- Correlate security events to identify potential threats and attack vectors.

- Respond to security incidents in a timely and effective manner, following established incident response procedures.

- Conduct in-depth investigations of security incidents to determine root cause and impact.

- Contain and mitigate the impact of security incidents.

- Implement corrective and preventive measures to reduce the risk of future incidents.

- Proactively hunt for malicious activity within the network using advanced security analytics techniques.

- Analyze threat intelligence feeds and identify potential threats to the organization.

- Develop and implement threat hunting strategies to detect and respond to emerging threats.

- Develop and maintain security dashboards and reports to track security performance and identify trends.

- Conduct security assessments and vulnerability scans.

- Prepare comprehensive incident reports and presentations for management and other stakeholders.

- Stay up-to-date on the latest cybersecurity threats, vulnerabilities, and best practices.

- Research and evaluate new security technologies and tools.

- Contribute to the continuous improvement of security operations processes and procedures.

Qualifications & Experience :

Education :

- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.

Experience :

- 4-6 years of professional experience in cybersecurity with a focus on threat hunting, incident response, and security monitoring.

Skills :

- Strong understanding of network protocols (TCP/IP, UDP, etc.), security principles, and industry best practices.

- Proficiency in using SIEM tools (Splunk, QRadar, ArcSight).

- Experience with threat intelligence platforms and feeds.

- Strong analytical and problem-solving skills.

- Excellent written and verbal communication skills.

- Ability to work independently and as part of a team.

- Ability to work under pressure and respond effectively to critical situations