Soc Analyst 1 (immediate joinee)

Role & responsibilities

• Around 2 -3 years working experience in Global SOC
• Must have experience in any SIEM Management tool Splunk, QRADAR, HP Arc sight,
• Triage Specialist - Separating the wheat from the chaff.
• Deep investigations/CSIRT, Mitigation/recommends changes, More advanced SME in cybersecurity, Experienced security analyst, understands more advanced features of security tools, thorough understanding of networking and platform architecture (routers, switches, firewalls, security), Ability to dig through and understand various logs (Network, firewall, proxy, app, etc..)
• Good to have either of certifications like, ITIL, CCNA, CEH, etc.
• Process and Procedure adherence.
• Tier 2 Security Analystaddresses real security incidents.
• Evaluates incidents identified by tier 1 analysts.
• Responsible for conducting information security investigations as a result of security incidents identified by the Level 1 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone)
• Uses threat intelligence such as updated rules and Indicators of Compromise (IOCs) to pinpoint affected systems and the extent of the attack.
• Analyzes running processes and configs on affected systems.
• Carries out in-depth threat intelligence analysis to find the perpetrator, the type of attack, and the data or systems impacted. Creates and implements a strategy for containment and recovery.
• Act as a point of escalation for Level-1 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques.

Preferred candidate profile

Perks and benefits