31 Jul
|
Access Healthcare Services
|
Chennai
31 Jul
Access Healthcare Services
Chennai
JOB SUMMARY
We are seeking an experienced Security Analyst (Tier 2) to join our Security Operations Center (SOC) team. The successful candidate will serve as a subject matter expert in enterprise security monitoring, responsible for the detection, investigation, and response to cybersecurity incidents and threats across a large-scale, complex enterprise setting.
JOB LOCATION: Chennai
Key Responsibilities:
Manage and maintain the SIEM platform — ensuring log ingestion health, data source onboarding, parser validation, and rule accuracy.
Lead and coordinate Tier 2 incident response activities — containing, eradicating, and recovering from security incidents in line with the SOC IR playbook and defined SLAs.
Document all investigation steps, findings, evidence, and actions taken accurately within the ITSM / ticketing system (e.g. ServiceNow, Jira).
Perform root cause analysis (RCA) on significant incidents and contribute lessons learned to post-incident review reports.
Develop, tune, and maintain detection rules, correlation rules,
and dashboards to improve coverage across the MITRE ATT&CK; framework.
Identify log source gaps and work with IT and infrastructure teams to onboard missing data sources into the SIEM.
Automate repetitive triage tasks through SOAR playbooks (e.g. Cortex XSOAR, Sentinel Logic Apps) to improve analyst efficiency and reduce MTTD/MTTR.
Monitor and investigate endpoint telemetry using EDR platforms (e.g. CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne) to detect malicious activity including malware, ransomware, and livingoff-the-land (LotL) attacks.
Analyse firewall logs and network traffic data (Palo Alto, FortiGate, Cisco ASA, Check Point) to identify suspicious traffic patterns, policy violations, and network-based threats.
Investigate alerts originating from IDS/IPS systems , web proxies, DNS security platforms, and network detection and response (NDR) solutions
Consume and operationalize threat intel
📌 Senior Security Analyst Chennai
🏢 Access Healthcare Services
📍 Chennai