Job Summary

Monitor security alerts and events using SIEM tools like Splunk/Sentinel/Qradar. Work with EDR/XDR solutions like CrowdStrike, Defender, SentinelOne, Cortex XDR. Investigate and respond to security incidents (L2 level analysis).

Perform log analysis from multiple sources (firewalls, endpoints, servers, cloud). Conduct threat hunting and identify potential risks. Escalate critical incidents and coordinate with relevant teams. Develop and improve incident response playbooks.

Analyze malware, phishing attempts, and suspicious activities. Ensure compliance with security policies and procedures. Generate reports and dashboards for management review.

Responsibilities
Monitor security alerts and events using SIEM tools like Splunk/Sentinel/Qradar
Work with EDR/XDR solutions like CrowdStrike, Defender, SentinelOne, Cortex XDR
Investigate and respond to security incidents (L2 level analysis)
Perform log analysis from multiple sources (firewalls, endpoints, servers, cloud)
Conduct threat hunting and identify potential risks
Escalate critical incidents and coordinate with relevant teams
Develop and improve incident response playbooks
Analyze malware, phishing attempts, and suspicious activities




Ensure compliance with security policies and procedures
Generate reports and dashboards for management review

Requirements
4+ years of experience in SOC / Cybersecurity operations
Solid knowledge of SIEM tools (e.g., Splunk, QRadar, Sentinel)
Experience with EDR/XDR solutions (e.g., CrowdStrike, Defender, SentinelOne)
Positive understanding of networking concepts (TCP/IP, DNS, VPN, Firewalls)
Familiarity with security frameworks (MITRE ATTCK, NIST, ISO 27001)
Hands-on experience in incident response and log analysis
Knowledge of threat intelligence platforms and tools
Robust analytical and problem-solving skills

Preferred Qualifications
Certifications such as CEH, Security+, CySA+, or equivalent
Experience with SOAR platforms
Basic scripting knowledge (Python, PowerShell, Bash)
Cloud security knowledge (Azure, AWS, GCP)

Disclaimer: This job posting and Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Cyber Security Soc Analyst Bengaluru
🏢 Ferilion Labs
📍 Bengaluru