Job responsibilities:
Monitor, analyze, and interpret security/system logs for events, operational irregularities, and potential incidents, and escalate issues as appropriate
Responsible for monitoring, detection of analysis through various input tools and systems (SIEM, IDS / IPS, Firewalls, EDR, etc.)
Conduct basic red team exercises to test the effectiveness of preventive and monitoring controls
Provides support for complex system/network exploitation and defense techniques to include deterring, identifying, and investigating system and network intrusions
Support malware analysis, host and network, log analysis, and triage in support of incident response
Maintaining and improving the security technologies deployed, including creating use cases, customizing or better configuring the tools based on past and current threats
Monitoring threat/vulnerability landscape, security advisories, and acting on them as appropriate
Continuously monitors the security alerts and escalation queue, triages security alerts
Monitoring and tuning SIEM (content, parsing, maintenance)




Monitoring Cloud infrastructure for security-related events
Delivers scheduled and ad-hoc reports
Develop and coach L1 analysts
Author Standard Operating Procedures (SOPs) and training documentation
Work the full ticket lifecycle; handle every step of the alert, from detection to remediation
Generates end-of-shift reports for documentation and knowledge transfer to subsequent analysts on duty
Perform threat-intel research, learn current attack patterns, actively participate in security forums.

Job specifications:

Qualification:
Bachelor’s degree in Engineering or closely related coursework in technology development disciplines
Certifications like CISSP, CEH, CISM, GCIH, GCIA are desirable
Experience with the following or related tools: SIEM Tools such as Splunk, IBM QRadar, SecureOnix; Case Management Tools such as Swimlane, Phantom, etc.; EDR tools such as Crowdstrike,

📌 Nopalcyber Soc Sr Analyst Hyderabad (India)
🏢 NextHire
📍 India