Responsibilities

- Guaranties confidentiality of information;

- Ability to work independently and in a team;

- Follow process and documentation;

- Good problem solving abilities and analytical skills;

- High inclination in reading and understanding technical documentation;

- Good Written and oral skills in English;

- High degree of commitment and diligence;

- Willingness to work 24x7 shifts.

Technical Requirements

- Strong expertise in Endpoint Security tools including monitoring, threat detection, and remediation.

- Developed and maintained security playbooks and automated workflows to improve incident response efficiency.

- Extensive experience in Incident Response, including investigation, triage, containment, eradication, recovery, and post-incident analysis.

- Strong understanding of the MITRE ATT&CK; framework, Cyber Kill Chain, IOC/IOA analysis, and threat detection methodologies.

- Investigate and triage DLP alerts to identify potential data exfiltration, policy violations, or insider threats.

- Good working knowledge of SIEM platforms for log collection, event correlation, alert triage, threat hunting, and security monitoring.

- Strong knowledge of log analysis, including Windows Security, System, and Application logs, authentication events, account lockouts, privilege escalation, and suspicious process execution.

- Proficient in Scripting and Automation using PowerShell, Python, and Bash to improve operational efficiency.

- Good knowledge of Vulnerability Management, including scanning, risk prioritization, and remediation tracking.

- Good understanding of Operating Systems: Windows Server, Windows 11,



and Linux distributions.

- Hands-on experience working with Linux OS administration and security hardening.

- Experienced in validating and verifying system security requirements, performing security analysis, and designing secure system architectures.

- Conduct root cause analysis RCA for security incidents and provide remediation recommendations;

- Work with IT, Cloud, Network, and Application teams during incident response.

Skills

- Robust understanding of task, project and responsibilities ownership

- Ability to work independently and as part of a team

- Willing to work off-hours in an on-call schedule

- Creative and innovative thinking
- Good organization skills to balance and prioritise work

- Analytical and problem solving skills to troubleshoot issues

Education/Training

- Graduation (BSC/ BCA/ BE/B.Tech/MSC IT) with no history of arrears.

- 5-7 years of Cybersecurity Experience

Professional Experience

- 5 to 7 years experience working within SOC Operations, Endpoint detection response incident handling, threat hunting, vulnerability management

- Experience working in Ticketing tools like ServiceNow, JIRA etc.

- Experience with OS like Windows, Linux for analysis

- Experience in SIEM tools for managing Playbooks

- Experience with DLP Incidence handling

- Experience with Log Source Monitoring

- Experience in Automation AI (Optional)

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Sr Engineer - GISOCC IS Technology (Chennai)
🏢 Valeo
📍 Chennai