Sr Administrator (Support & Operations)

Gautam Buddha Nagar, Uttar Pradesh

Job Summary

Monitor and analyze security events and threats as part of a 24x7x365 SOC environment.

Perform daily triage of alerts and tickets, leveraging threat intelligence and escalating incidents as needed.

Act as a technical escalation point for SOC analysts and mentor junior team members.

Lead incident response activities, conducting technical investigations and providing expert guidance.

Conduct cyber threat research to enhance SIEM use cases and playbook development.

Perform proactive threat hunting and investigations without predefined indicators of compromise.

Collaborate with engineering teams to evaluate and implement current or updated security solutions.

Support and manage security tools including EDR, WAF, and NIDS platforms.

Automate repetitive SOC tasks to improve operational efficiency and reduce manual errors, using scripting and workflow tools.

Troubleshoot and resolve log related issues, ensuring minimal disruption to business operations and adherence to SLAs.

Support internal and external audits by providing evidence.

Participate in disaster recovery drills, security assessments, and SOC-related risk mitigation activities.

Work within ITSM frameworks to manage incidents, changes, and service requests.

Key Responsibilities

Excellent communication and interpersonal skills both written and oral.

- Client relationship management




- Ability to work hands on tools and processes.
- Willing to work 24x7 project timelines

Skill Requirements

Advanced expertise in using SIEM technologies for event investigation and threat detection.

Strong knowledge of Windows Active Directory, Group Policies, and PowerShell scripting.

Proficient in log analysis across Windows, Linux, Azure, O365, AWS, Google Cloud, network, and endpoint security controls.

Familiarity with the MITRE ATT&CK; framework for understanding adversary tactics and techniques.

Experience in malware analysis and working with Endpoint Protection and EDR solutions.

Knowledge of content filtering technologies and their application in enterprise environments.Solid understanding of network fundamentals including OSI model, TCP/IP, DNS, HTTP, SMTP, and
packet capture/analysis.

- Hands-on experience with cloud platforms such as AWS, Google Cloud, and Microsoft Azure.
- Deep understanding of malware capabilities, attack vectors, and their potential impact.
- Skilled in threat analysis and vulnerability assessment methodologies.
- Experience with vulnerability scanning tools and technologies.
- Working knowledge of firewalls, VPN technologies, IDS/IPS, and web application firewalls.
- Familiarity with host-based intrusion detection systems.
- Proven experience in incident response and a solid understanding of IT Service Management (ITSM)

processes such as change, incident, and problem management.

Other Requirements

📌 Sr Administrator (Support & Operations) (India)
🏢 HCLTech
📍 India