SOC || Gurgaon and Mumbai

Roles and Responsibitlies:

• Monitor Security Systems: Strong understanding of Security Incident and Event Management (SIEM) and Security Orchestration and Automated Response (SOAR), IDS/IPS, firewalls, and antivirus solutions.
• Incident Detection and Response: Identify, analyze, and respond to security incidents in a timely manner. Conduct root cause analysis and recommend corrective actions to prevent future incidents.
• Security Investigations: Conduct thorough investigations of security incidents, including forensic analysis and data recovery. Document findings and report them to senior management.
• Threat Intelligence: Stay updated on the latest cybersecurity threats and vulnerabilities. Utilize threat intelligence to improve detection and response capabilities.
• Collaboration: Work closely with other IT teams, including network administrators, application developers, and infrastructure engineers, to ensure comprehensive security measures are in place.
• Preparing RCA document and daily/weekly/monthly Reports.
• Maintaining and improving Playbooks, use case fine tuning.
• Proficiency with SIEM tools like Splunk (preferred), Microsoft Sentinel, Securonix, Google chronicle, etc.
• Strong knowledge of network protocols, operating systems (Windows, Linux), and common applications.
• Experience with IDS/IPS, firewalls, EDR, and other security technologies.

Qualifications:

• Experience: Minimum of 2+ years of experience in a SOC or related cybersecurity role.
• Education: Bachelors degree in computer science, Information Technology, Cybersecurity, or a related field. Relevant cyber security certifications are a plus.