Position Title: Sr. Analyst – SOC

Business / Function: GRAMAX Cybertech

Department / Sub-Department: Cyber Security

Location: Delhi

1. Key Accountabilities

Responsibilities/duties associated with the job. Where defined, the Key Performance Indicator (KPI) used to judge performance is listed beneath the accountability.

- Continuous monitoring of security alerts and respond to the incidents as per the laid down actions of Run Book- Provide incident investigation as per Security Incident Management Process / Guidelines- Drive containment strategy during data loss or breach events- Triage and resolve advanced vector attacks such as botnets and Advanced Persistent Threats (APTs)- Perform investigations in response to escalated security alerts, gather evidence and determine RCA of the security incident- Plan for adversary eviction and incident response- Conduct malware analysis; maintain up-to-date knowledge of malware analysis techniques- Provide inputs for forensic analysis and investigation of incidents- Carry out continuous threat collection and proactively identify threats for global clients to complement the standard SOC- Identify requirements and drive appropriate solutions- Create customized use cases as per the setting and fine-tune the security solution- Provide guidance to member analysts in the team- Create technical documentation (SOPs, run books, etc.)- Contribute to identification (hunting)



and profiling of threat actors and TTPs; detect current threats and build/run custom analysis models using security event data- Ensure integration of current security infrastructure and indicators- Assist in development of the Threat Hunting service and conduct threat hunting- Execute the incident management process- Handle customer interactions and on-site engagements- Align weekly/fortnightly reviews with client and Sr. Security Delivery Manager- Work with XDR and SIEM solutions such as QRadar, Seceon, ArcSight, Splunk, etc.- Coordinate with IT, security operations and other teams for remediation and mitigation as appropriate- Perform Root Cause Analysis (RCA) for incidents and update the knowledge document- Handle incident escalations from other analysts; project and manage incident responses and coordinate remediation with customers- Create SOPs for L1 and L2 Incident Response processes- Train L1/L2 analysts on advanced threat analysis and APT analysis using various tools- Perform in-depth malware analysis of network activity, disks and memory- Analyze threat and vulnerability alerts, determine current impact and coordinate remediation actions as necessary- Conduct detailed analysis using a variety of tools and techniques to investigate, navigate, correlate and understand security incidents- Work directly with data asset owners and business response plan owners during high-severity incidents- Provide fine-tuning recommendations to administrators based on findings during investigations or threat information reviews- Maintain knowledge of network security zones, firewall configurations and IDS policies- Maintain knowledge of systems communications from Layer 1 to Layer 7- Bring experience in Systems Administration, Middleware and Application Administration- Bring experience with Network and Network Security tools administration- Aggregate and parse log data (syslog, HTTP logs, DB logs) for investigation purposes- Use log search tools with regular expressions and natural language queries

📌 Senior Analyst - SOC (Mumbai)
🏢 GRAMAX
📍 Mumbai