Area(s) of responsibility

Cyber Security SOC Analyst

Job Responsibilities:

- Incident and Data breach handling experience (example Ransomware, Malware attack etc.)
- Understanding and defending knowledge in Cyber Security (Ex. Blue Teaming, MITRE ATT&CK; Matix, Cyber Kill Chain, NIST CSF etc.)
- Alerts identification (example identify false positive) and incident triaging
- Understanding about Security Incident Event Management (SIEM) and SOC Operations
- Monitor, detect and respond to threats in customer environments using our SOC platform
- Tune threat detection for both general and specific customer environments to minimize false positive and amplify productivity
- Understanding and implementing knowledge on EDR Platform (Ex. Crowdstrike)
- Maintain & formulate Standard Operating Procedures for SOC Security Services
- Maintain proficiency by following the latest trends and developments in cybersecurity
- Report presentation to stakeholders
- Maintain proficiency by following the latest trends and developments in cybersecurity
- Act as an escalation resource for Open Systems SOC Security Analysts who are triaging security events and observations to identify potential threats
- Create reports for customers and internal operational use on an ongoing basis
- Broaden coverage of detection by identifying opportunities to acquire,



ingest and analyze Data and logs from additional sources and technologies
- Help extend malware analysis capability, execute malware triage
- Create and update documentation to support ongoing operations
- Collaborates with Security Operations Center (SOC) Analyst to monitor and analyze security alerts and events.

Experience, Skills & Qualifications

- Overall Exp: 4 -6 years
- Solid knowledge of concepts like Blue Teaming or Purple Teaming, Threat Hunting, EDR, SIEM
- Experience using EDR (Crowdstrike, Sophos etc.) and SIEM systems (Splunk, Microsoft Sentinel etc.)
- Strong understanding of security operations, process, and procedures with specific reference to incident response and threat intelligence
- Able to work collaboratively on a global basis and help build team capability
- Familiarity with common and latest forms of malware, attacker tools, and techniques
- Strong awareness of the current global threat landscape
- Hands-on experience installing, configuring, or tuning some or all of the following security technologies: Cyber Security Analytics, Secure web gateways/web proxy, endpoint protection (EPP/AV/HIDS), endpoint detection and response solutions (EDR example Crowdstrike Falcon), DLP/FIM, SSL Certificate Manager and VPN/encryption.
- Azure Security/ AWS Security certifications are added advantages

📌 Cyber Security SOC - Technical Specialist-Cybersecurity (Hyderabad)
🏢 Birlasoft
📍 Hyderabad