Conduct in-depth analysis of complex and escalated security alerts and events from various security tools (SIEM, IDS/IPS, EDR, etc.).
Correlate data from multiple sources to identify and validate potential security incidents with high accuracy.
Perform advanced triage to determine the scope, severity, and potential impact of security events.
Document analysis findings clearly and concisely, providing actionable intelligence for incident response.
Detection Rule Development and Optimization:
Develop, implement, and fine-tune correlation rules, alerts, and dashboards within the SIEM platform to improve detection capabilities and reduce false positives.
Analyze existing detection logic and recommend improvements based on threat intelligence, incident trends, and best practices.
Stay current with emerging threats and attack techniques to proactively develop recent detection strategies.
Threat Intelligence Integration:
Leverage threat intelligence feeds and platforms to enrich security event analysis and identify potential threats targeting the organization.
Correlate threat intelligence with internal security data to proactively identify indicators of compromise (IOCs).
Contribute to the development of threat profiles and attack scenarios relevant to the organization.
Incident Escalation and Collaboration:
Serve as a point of escalation for complex or high-severity security events.
Collaborate effectively with incident responders, threat hunters, and other security teams to provide critical context and analysis during incident handling.
Provide technical guidance and support to junior analysts during incident triage and analysis.
Security Tooling and Technology Expertise:
Maintain a strong understanding of the organization's security infrastructure and the capabilitie
📌 SOC Detection Analyst (India)
🏢 Clifyx
📍 India
Reply to this offer
Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.