Experience in security monitoring support (L2/L2.5 Analyst) via Sentinel Console and multiple dashboards and Incident response. Should be able to undertake following:-
(a) Phishing alerts investigation in office 365 console for pending action.
(b) MDATP mailbox investigation on user report phishing on day-to-day basis.
(c) Preparation of Bi-weekly and Monthly Reports.
(d) Resolution of security incidents triggered by the SOC team (BVSOC Team) to other resolver groups.
(e) Triaging of true positive Incidents for further investigation and provide recommendations.
(f) Escalating high priority tickets to Client IR team and working with them till closure
(g) Profiles with good hands-on experience on any SIEM tool along with experience on Email Security and Endpoint Security (EDR).
Other Requisites
Excellent communication skills.
Willing to work in rotational shifts including Night Shifts and support 24x7 shifts.
Client interview mandatory.
Knowledge of ITSM tool preferably Service Now.
Profiles with positive experience in providing L1/L2/L3 Operations support in SOC