02 Sep
|
AccessHealthcare
|
Chennai
02 Sep
AccessHealthcare
Chennai
JOB SUMMARY:
JOB LOCATION: Ambattur Industrial Estate, Chennai:
Key Responsibilities:
- Manage and maintain the SIEM platform— ensuring log ingestion health, data source onboarding, parser validation, and rule accuracy.
- Lead and coordinate Tier 2 incident responseactivities — containing, eradicating, and recovering from security incidents in line with the SOC IR playbook and defined SLAs.
- Document all investigation steps, findings, evidence, and actions taken accurately within the ITSM / ticketing system(e.g. ServiceNow, Jira).
- Perform root cause analysis (RCA)on significant incidents and contribute lessons learned to post-incident review reports.
- Develop, tune, and maintain detection rules, correlation rules, and dashboardsto improve coverage across the MITRE ATT&CK; framework.
- Identify log source gaps and work with IT and infrastructure teams to onboard missing data sources into the SIEM.
- Automate repetitive triage tasksthrough SOAR playbooks (e.g. Cortex XSOAR, Sentinel Logic Apps) to
improve analyst efficiency and reduce MTTD/MTTR.
- Monitor and investigate endpoint telemetry using EDR platforms(e.g. CrowdStrike Falcon, Microsoft
Defender for Endpoint, SentinelOne) to detect malicious activity including malware, ransomware, and living off-the-land (LotL) attacks.
- Analyse firewall logs and network traffic data(Palo Alto, FortiGate, Cisco ASA, Check Point) to identify suspicious traffic patterns, policy violations, and network-based threats.
- Investigate alerts originating from IDS/IPS systems, web proxies, DNS security platforms, and network
detection and response (NDR) solutions
- Consume and operationalize threat intelligence feeds(commercial and open-source) — triaging IOCs,
enriching alerts, and updating blocking lists in SIEM, firewall, and EDR platforms.
- Track active threat campaigns, adversary groups, and CVEsrelevant to the organization’s sector and
technology stack.
- Collaborate with IT, infrastructure, and engineering teams on thre
📌 Senior Security Analyst (Chennai)
🏢 AccessHealthcare
📍 Chennai