Job Description –

Role Summary:

- We are looking for a highly skilled and proactive Senior Security Analyst to join our Security Operations Center (SOC) team. The ideal candidate will be responsible for monitoring security alerts, investigating threats, managing SIEM operations, and ensuring timely incident resolution while maintaining log integrity and system health.
- Key Responsibilities:
- Continuously monitor security alerts, incidents, and health dashboards.
- Investigate security alerts and ensure closure by coordinating with the concerned teams.
- Analyze and report on bad reputation IPs; forward findings to the network team for appropriate blocking.
- Develop and customize reports, rules, and dashboards as per client requirements.
- Create and tune incident alert rules in the SIEM platform.
- Integrate various security devices and log sources into the SIEM (e.g., firewalls, routers, servers).
- Perform fine-tuning of security alerts to reduce false positives and improve detection accuracy.
- Monitor and manage SIEM storage components such as Archiver.




- Maintain connectivity checks of all RSA NetWitness components (Log Decoder, Concentrator, ESA, etc.).
- Backup logs from cold storage to virtual machines (VMs) as per retention policy.
- Ensure the integrity, availability, and confidentiality of event and log data.
- Provide end-to-end resolution for HPSM (HP Service Manager) tickets.
- Participate in compliance checks and audit readiness tasks.
- Required Skills:
- Strong hands-on experience with RSA NetWitness SIEM or similar platforms.
- Deep understanding of security monitoring, alert handling, and incident response.
- Experience in log analysis and security use case development.
- Proficient in integrating recent log sources and performing log correlation.
- Knowledge of network security, IP reputation, and attack vectors.
- Familiar with HPSM or other ITSM tools for ticket lifecycle management.

Tools & Technologies:

- RSA NetWitness SIEM
- HPSM or ITSM Tools
- Security Dashboards and Reporting Tools
- Cold Storage Backup Systems
- Network Threat Intelligence Platforms
-

📌 SIEM Administrator (Ghaziabad)
🏢 Cms IT Services
📍 Ghaziabad