Sr Security Analyst
Level : L2
Exp: 4+yrs
Location: Hyderabad.
JD:
- Tier 2 Security Analyst addresses real security incidents.
- Evaluates incidents identified by tier 1 analysts.
- Responsible for conducting information security investigations as a result of security incidents identified by the Level 1 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone)
- Uses threat intelligence such as updated rules and Indicators of Compromise (IOCs) to pinpoint affected systems and the extent of the attack.
- Analyzes running processes and configs on affected systems.
- Carries out in-depth threat intelligence analysis to find the perpetrator, the type of attack, and the data or systems impacted. Creates and implements a strategy for containment and recovery.
- Act as a point of escalation for Level-1 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques.
- Should have experience in Developing current correlation rules & Parser writing
- Experience in Log source integration
- Act as the lead coordinator to individual information security incidents.
- Document incidents from initial detection through final resolution.
- Participate in security incident management and vulnerability management processes.
- Coordinate with IT teams on escalations, tracking, performance issues, and outages.
- Communicate effectively with customers, teammates, and management.
- Prepare Monthly Executive Summary Reports for managed clients and continuously improve their content and presentation.
- Provide recommendations in tuning and optimization of security systems, SOC security process, procedures and policies.
- Define, create and maintain SIEM correlation rules, customer build documents, security process and procedures.
- Follow ITIL practices regarding incident, problem and change management.
- Staying up to date with emerging security threats including applicable regulatory security requirements.
- Maintain an inventory of the procedures used by the SOC and regularly evaluate the SOC procedures and add, remove, and update the procedures as appropriate
- Publish weekly reports to applicable teams.
- Generate monthly reports on SOC activity.
- Should be skilled on Deception Technology, EPP, EDR, IPS/IDS desirable.
- Required flexibility to work in a 24x7 environment.
Share the CV to
[email protected]
📌 Sr Security Analyst(SOC) (Hyderabad)
🏢 Shi
📍 Hyderabad