Description
Job Summary: Experience Profile (3 Years SOC Analyst)

✔ 3+ years in SOC Monitoring & Incident Handling
✔ Hands-on Logpoint (GuardSIX) SIEM operations
✔ Experience in alert triage and incident investigation
✔ Knowledge of EDR, Firewall, IDS/IPS, Email Security logs
✔ Familiarity with MITRE ATT&CK; and Threat Hunting
✔ Working experience in a 24x7 SOC setting

Location: Hyderabad
Shift: 24x7 Rotational Shifts
Work Location: 5 days work from office

Key Responsibilities

Security Monitoring & Incident Detection (Must have)
• Monitor security events and alerts generated from Logpoint SIEM (GuardSIX) and integrated security tools.
• Perform real-time analysis of security incidents and suspicious activities.
• Investigate alerts related to malware, phishing, ransomware, insider threats, privilege misuse, and unauthorized access.
• Validate and triage security alerts based on severity and business impact.
• Escalate incidents to L2 & L3 teams and stakeholders as per defined procedures.

Incident Response & Investigation (Must Have)




• Conduct incident investigations using SIEM queries and threat intelligence sources.
• Analyze logs from:
o Windows Servers & Workstations
o Linux Systems
o Active Directory
o Firewalls
o IDS/IPS
o Proxy and Web Gateways
o EDR/XDR Solutions
o Cloud Platforms (Azure, AWS, GCP)
• Perform root cause analysis and incident documentation.
• Support containment, eradication, and recovery activities.

Threat Hunting & Threat Intelligence (Must have)
• Execute proactive threat hunting activities using Logpoint searches.
• Leverage MITRE ATT&CK; framework for threat mapping.
• Analyze Indicators of Compromise (IoCs).
• Correlate threat intelligence feeds with internal security events.
• Identify anomalous user and system behaviors.

Logpoint SIEM Administration & Use Case Monitoring (Good to have)
• Create, modify, and tune Logpoint correlation rule

📌 DIGITAL SECURITY (Hyderabad)
🏢 Zensar Technologies
📍 Hyderabad