Role & responsibilities

- Monitor multiple security technologies such as SIEM, Antivirus, Vulnerability management, Web Proxy, Security Patch management.

- Tune/Create SIEM correlation rules.

- Perform in-depth incident and event analysis.

- Respond and handle the security incidents.

- Agree and align on reporting and monitoring requirements with business stakeholders.

- Conduct research on emerging security threats.

- Modify Standard Operating Procedures (SOPs) and training documentation.

- Coach junior team members.

- Good Knowledge on SIEM tools like QROC, Arcsight, SPLUNK or Sentinel.

- Knowledge and experience with PCs, LAN topologies, routers, hubs, and terminal servers

- Knowledge of security applications such as IDS, Security Event Management and anomaly detection tools.

- Knowledge of VPN technology.

- Knowledge of investigation tools like FTK imager, memory dump, threat analysis tools.

- Ability to read and interpret network diagrams.

- Oversight of facilitates for other offices in the UK and provide support and guidance where required.

- Ability to translate event analysis findings into new monitoring proposals.

- Remain adaptable with 24/7 shift and task assignments.

📌 Soc/ (Mumbai)
🏢 Tata Consultancy Services
📍 Mumbai