SOC Analyst

Role & responsibilities [CEH certification is prefferred]

• Monitor and analyze logs and alerts from a variety of different technologies across multiple platforms in order to identify and mitigate security incidents affecting the enterprise. This includes analysis of logs from:
• IDS/IPS.
• Firewall.
• Proxies.
• Anti-virus and end-point protection.
• Servers and workstations.
• Cloud security technologies and devices.
• Assess the security impact of security alerts and traffic anomalies to identify malicious activities and take mitigating actions or escalates up to senior members of the team as appropriate.
• Leverage fundamental understanding of Operating Systems (Windows, Unix/Linux,) in support of identifying security incidents and to have a proper overview of risk profile.
• Execute analysis of email based threats to include understanding of email communications, platforms, headers, transactions, and identification of malicious tactics, techniques, and procedures.
• Follow escalation and handoff procedures to team members and leadership based on defined threat and priority determination.
• Utilize a variety of security tools and technologies to analyze potential threats to determine impact, scope, and recovery.
• Leverage network security tools and capabilities to support Cyber Threat Monitoring activities.
• Document results of cyber threat analysis effectively and prepares comprehensive handoff and/or escalation for Incident Reponses or other teams within the TMC.
• Support in writing technical articles for knowledge sharing within the team, when necessary.

Preferred candidate profile & Skills Required

• B.Tech (Any specialization)
• Knowledge of Networking protocols and technologies, e.g. TCP/IP, Firewalls, Routers, etc.
• Knowledge of Security principles, techniques and technologies
• Knowledge of Ethical hacking
• Knowledge of SIEM tools is good
• Experience with Vulnerability scanners
• Analytical and problem-solving skills
• Ability to manage multiple tasks
• Basic knowledge of IT technologies, ideally related to Security
• Basic knowledge of Windows server and Unix/Linux operating systems
• Proficiency in written and spoken English
• Willingness to learn and improve

Perks and benefits

On par with industry standard