Security Operations Center Analyst
LenovoBengaluru, Karnataka, India1 day ago
Job descriptionOperate as detection and security incident response subject-matter expert Technical subject-matter expert in SOC / SIEM and supporting technologies (EDR, UEBA, etc.) to develop custom queries (e.g., KQL) and playbooks for the SOC analysts to utilize in their investigations. Align and maintain detection capability to the Mitre attack framework. Perform root cause analysis of detection failures, identify areas for improvement. Drive the continuous development of detection capability for SOC Manage, investigate, and resolve complex issues with the Security tooling. Securely configure the SIEM, and other SOC solutions in accordance with relevant policy and regulation Support the Threat hunters in executing complex data analysis. Provide a point of escalation for SOC / security detection technical service issues. Ensure the relevant security tools are compliant with company standards and governance. Contribute to existing Policy, procedures and process documentation enhancements Define and implement technical governance processes for security tooling of SOC, SIEM and other security tools including AV, EDR, Defender Cloud. Create and review detection technology high and low level designs. Propose and identify automation opportunities resulting from incidents; Provide recommendations to the Client team, on how to mitigate or avert the occurrence of any suspicious activity within their environment. Provide In depth analysis to the user / customer about the security incidents (eg. Phishing attack) Troubleshoot connector / logger / Manager for log retrievals Prepare SOC Management Reports. Analyzing & preparing daily and monthly reports based on the devices which are being monitored Creating Reports and Dashboards based on the customer requirement. Creating Queries for the Rules requested by client for real time alerts. Creating Reports which helps in providing the logs for the alerts, for finding any possible threats. Analyze a variety of network and host-based security appliance logs (Firewalls, NIDS, HIDS, Sys Logs, etc.) to determine the correct remediation actions and escalation paths. Independently follow procedures to contain, analyze, and eradicate malicious activity. Change Management / Implementation : Independently implement changes to meet customer infrastructure needs within area of technical responsibility Patch and Security Management : Apply patch and security changes per policy. Configuration Management : Review Configuration Management Database (CMDB) entries to ensure they are complete and accurate. Quality : Provide continual improvement recommendations for direct responsibility area (process improvement, technical standard updates, etc). Project Management : Lead & participate in customer and internal projects, including transformation. Customer Relationship Management : Set expectations with customers and / or internal businesses / end users within defined parameters. Teamwork : Work as part of a team, which may be virtual and / or global. Participate as part of a team and maintains good relationships with team members and customers Fine-tune SIEM and other SOC tooling to exclude noise and false positives Create and fine-tune content in SIEM - correlation rules, Dashboard and Reports etc Interact with SIEM, EDR and NDR vendors (TAC Support) to remediate any issues with tooling Evaluate new solutions for SOC Identify opportunities to improve overall capacity, playbook and runbook Understanding of threat landscapes and threat modelling, security threat and vulnerability management, and security monitoring Working knowledge of tools and techniques used by attackers to gain entry into corporate networks, including common IT system flaws and vulnerabilities. Knowledge of industry standards such as ISO 27001, HIPAA, FedRAMP, Cloud Security Alliance, NIST frameworks and risk methodologies Demonstrated experience in communicating complex security concepts, both verbally and in writing, to a variety of audiences Must take ownership of tasks and demonstrate high degree of autonomy to ensure completion Excellent understanding of related technologies (Networking, Operating Systems) General Project Management (Expert) Customer / Vendor Management (IExpert) Business Analysis (Expert) Has ability to perform / drive resolution of problems on individual products. Able to communicate broad and specific concepts with team and to peers. Able to produce documentation for use by team and customer. Able to perform / drive resolution of problems on combinations and interactions of products Strong verbal & written communication skills Proactive approach to meet & exceed goals
PFB the JD : Job Description
Security Operations Centre (SOC) Analyst plays a vital role in Security delivery. As a SOC Analyst Level 3, you will be on the front line of Cyber Defense, detecting & responding to Cyber Incidents as they happen. You will work with other team members to provide situational awareness through detection, containment, and remediation of IT threats. This job requires great attention to detail and general awareness of Cyber Security tools like SIEM, XDR, EDR, IDS / IPS, ability understand various logs - network logs, sys logs, Firewall logs. As a SOC Analyst you are expected to have working knowledge in areas of networking, malware analysis, incident response, vulnerability management.
- Threat & vulnerability analysis
- Investigate, document & report Information security issues & emerging trends
- Analysis & response to unknown vulnerabilities
Responsibilities
As a SOC Analyst - Level 3, you will :
Skill
8 - 12 years of relevant experience
Typical skills include :
Qualification & Experience
Bachelor’s degree in engineering (Electronics, Communication, Computer Science)
8 - 12 years of relevant experience in SOC domain
Strong understanding ITIL process
Recognized Cyber Security certifications, such as CISSP, CISM, SANS, SABSA, OSCP are advantageous.
Microsoft Security and compliance certifications such as SC-200, MS-500 and AZ-500 preferred
Create a job alert for this search
Security Analyst • Bengaluru, Karnataka, India
Related jobs
![[Urgent] Security Operations Center Analyst](https://cdn-logos.talent.com/v1/logo/image?feedcode=attb-in&company_name=Tata%20Consultancy%20Services)
- Promoted
Cyber Security Operations Center Manager
Sampoorna Consultants Pvt. LtdBangalore Key Responsibilities : - Apply your knowledge of IT security, security operations, and incident response with a focus in Google Cloud Platform (GCP) specific knowledge to manage...Show moreLast updated: 19 days ago
- Promoted
Security Operations Center Analyst
MyRemoteTeam IncBangalore, IN Hiring : Senior SOC Analyst (Remote).Tier 2 or higher) for a potential long-term project.If you’re a cybersecurity professional passionate about investigation, threat analysis, and proactive defense...Show moreLast updated: 1 day ago
- Promoted
Security Operations Centre Analyst
RingCentralBengaluru, Karnataka, India Security Operations Centre Analyst.This is a great opportunity to work at a rapidly growing, market leading Unified Communications as-a-service company.
RingCentral provides Voice-over-IP (VoIP), ho...Show moreLast updated: 3 days ago
- Promoted
Workday Security System Analyst
Avalarahosur, tamil nadu, in Avalara is an AI-first company.We expect every engineer, manager, and to actively leverage AI to enhance productivity, quality, innovation, and customer value.
AI is embedded in our workflows, and p...Show moreLast updated: 12 days ago
- Promoted
Security Operations Center Analyst
Tata Consultancy ServicesBengaluru, Karnataka, India Establish goals and priorities by working closely with your team to identify the most critical focus areas.Improving incident response times.
Reducing false positives and other extraneous alerts.Enh...Show moreLast updated: 22 days ago
- Promoted
Security Operations Analyst
Insight GlobalBengaluru, Karnataka, India Security Operations Center (SOC) Analyst.Microsoft Defender (Endpoint, Identity, and Cloud).This role is critical for monitoring, analyzing, and responding to security threats across cloud and hybr...Show moreLast updated: 3 days ago
- Promoted
[Urgent] Security Operations Center Analyst
Tata Consultancy ServicesBengaluru, Karnataka, India Min 8 years professional experience in IT Audit, compliance or security assurance, preferably SOC2 Type II, ISO 27001 - Strong knowledge of SOC 2 framework and control requirements - Familiarity wi...Show moreLast updated: 7 days ago
- Promoted
Senior Quality Analyst I - Security Operations Center
OptivBangalore Description : The Sr.QA Analyst will conduct thorough quality assurance reviews on alert tickets, ensuring th...Show moreLast updated: 19 days ago
- Promoted
Arista Networks - Security Operations Center Analyst - Crowdstrike
AristaBangalore Description : Arista Networks is an industry leader in data-driven, client-to-cloud networking for large data center, campus and routing environments.Arista is a wel...Show moreLast updated: 10 days ago
- Promoted
Security Operations Center Analyst
ConfidentialBengaluru / Bangalore, India Security Operation Centre (SOC).Information Security Analyst are the first level responsible for ensuring the protection of digital assets from unauthorized access, identify security incidents and ...Show moreLast updated: 30+ days ago
- Promoted
Lead Security Operations Analyst
SmarshBengaluru, Karnataka, India Smarsh is the leader in Communications Compliance, Archiving, and Analytics.We provide compliance across the broadest set of communications channels with insights on what’s being captured.Smarsh cu...Show moreLast updated: 30+ days ago
- Promoted
Senior Manager – SOC Operations
MphasisBangalore Urban, Karnataka, India Job Description : Senior Manager – SOC Operations.We are seeking an experienced, hands-on Senior Manager to lead our Security Operations Center (SOC).
The ideal candidate will bring deep technical ex...Show moreLast updated: 22 days ago
- Promoted
- New!
▷ (Only 24h Left) Security Operations Center Analyst
Insight GlobalBengaluru, Karnataka, India We are seeking a Security Operations Center (SOC) Analyst with hands-on experience in Secureworks Taegis and Microsoft Defender (Endpoint, Identity, and Cloud) to join our cybersecurity team.This r...Show moreLast updated: 1 hour ago
- Promoted
Senior Manager - Security Operations Center
ProEdge ServicesBangalore Role Overview : We are seeking an experienced, hands-on Senior Manager to lead our Security Operations Center (SOC).The ideal candidate will bring deep technical expe...Show moreLast updated: 12 days ago
- Promoted
Security Operations Center Analyst
Insight GlobalBengaluru, Karnataka, India Security Operations Center (SOC) Analyst.Microsoft Defender (Endpoint, Identity, and Cloud).This role is critical for monitoring, analyzing, and responding to security threats across cloud and hybr...Show moreLast updated: 3 days ago
- Promoted
Security Operations Center (SOC) Manager
ColorTokens Inc.Bengaluru, Karnataka, India Breaches happen—but with our cutting-edge.We enable organizations to continue operating while breaches are contained, ensuring critical assets remain protected.
Our innovative platform provides unpa...Show moreLast updated: 30+ days ago
- Promoted
Security Operations Center Analyst
Insight Global, LLCBangalore Description : - We are seeking a Security Operations Center (SOC) Analyst with hands-on experience in Google SecOps Chro...Show moreLast updated: 3 days ago
- Promoted
Resillion - Security Operations Center Analyst
ResillionBangalore Senior SOC Analyst (Microsoft Azure Sentinel) Experience Range : 3-5 Years.Company Description : Resillion is a global company with e...Show moreLast updated: 30+ days ago