Role & responsibilities

• Actively monitoring, analysing & escalating SIEM alerts based on correlation rules,
• Email protection alerts & malware analysis,
• Provide inputs for proactive content fine tuning & use case enablement,
• Active threat hunting on network flow, user behaviour & threat intelligence,
• Phishing email analysis for MFs,
• Raising incidents in Pastebin inte
• Should be familiar with Domain Knowledge (Cyber Security), Threat Hunting, SIEM- Azure Sentinel, SIEM - (RSA / Splunk / LogRhythm), Python Scripting, Windows Active Directory, Operating systems and servers.
• Ability to Triage and assignment Incident Handling.
• Ability to Follow Playbooks instructions- Incident Response Playbooks
• Ability to Comprehend Logs (HTTP, SMTP, Network) (Under guidance)
• Understand and imbibe current SOC process
• Perform quality assessment on SOC operations being performed as per existing process
• Record and deviations identified into tracking tool(s)/spreadsheets
• Perform follow-ups with respective error owners to mitigate process deviations
• Identify process deviations, Summarize and generate trends, patterns into process deviations / errors observed.

Preferred candidate profile

• BE/B.Tech/Post-Grad/ Graduate or Postgraduate in any other discipline
• 2-4 years of relevant experience.
• Candidates should be okay to work in rotational shifts.
• Good to have - Certifications - CSA (Certified SoC Analyst), CISM and CCSP, Certifications from Microsoft Azure Suite
• Candidates having SOC experience would be preferred
• Well versed in Microsoft productivity tools such as Word, PowerPoint and Excel
• An understanding of concepts of analytics and should be able to generate trends, drill downs, and various graphical representations
• Windows / Azure / AWS infrastructure knowledge will have added advantage
• Experience in Windows security tools like Defender for office, Defender for identity, Sentinel and other Microsoft security tools will have added advantage
• Excellent written and oral communication skills