ColorTokens - Senior Security Operations Center Analyst - SIEM Tool

About ColorTokens :

At ColorTokens, we empower businesses to stay operational and resilient in an increasingly complex cybersecurity landscape.

Breaches happenbut with our cutting-edge ColorTokens Xshield platform, companies can minimize the impact of breaches by preventing the lateral spread of ransomware and advanced malware.

We enable organizations to continue operating while breaches are contained, ensuring critical assets remain protected.

Our innovative platform provides unparalleled visibility into traffic patterns between workloads, OT / IoT / IoMT devices, and users, allowing businesses to enforce granular micro-perimeters, swiftly isolate key assets, and respond to breaches with agility.

Recognized as a Leader in the Forrester Wave : Microsegmentation Solutions (Q3 2024), ColorTokens safeguards global enterprises and delivers significant savings by preventing costly disruptions.

Our Culture :

We foster an environment that values customer focus, innovation, collaboration, mutual respect, and informed decision-making.

We believe in alignment and empowerment so you can own and drive initiatives autonomously.

Self-starters and high-motivated individuals will enjoy the rewarding experience of solving complex challenges that protect some of worlds impactful organizations be it a childrens hospital, or a city, or the Dfense department of an entire country.

Role : Sr. SOC Analyst.

Experience : 4 to 7 years.

Location : Bangalore.

Work mode : Work from Office (hybrid).

Shifts : Candidate must be willing to work in the rotational shifts 24 / 7.

Job Description :

Skills and Experience :

• 4+ years of security operations experience.
• Correlate and analyse events using the Splunk / Log Rhythm / Qradar and stellar cyber SIEM tool to detect IT security incidents.
• Knowledge of network and endpoint security, threat intelligence, and vulnerabilities.
• Conduct analysis of log files, including forensic analysis of system resource access.
• Review customer reports to ensure quality and accuracy.
• Monitor multiple security technologies, such as SIEM, IDS / IPS, Firewalls, Switches, VPNs, networking and other security threat data sources.
• Knowledge of sandbox and malware analysis.
• Knowledge of Cyber Kill Chain and MITRE ATT&CK frameworks functionality.
• Possible attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.
• CCNA, CEH, CISSP, GCA, GCIA, GCIH, SANS certification would be preferable.
• High level of integrity, professionalism, and attention to detail.
• Ability to communicate complex security issues to peers and management alike.
• A motivated, self-managed, individual who can demonstrate above average analytical skills and work professionally with peers and customers even under pressure.

Roles & Responsibilities :

Qualifications :

ref : hirist.tech)