Job Summary

We are looking for an experienced SOC Analyst to lead security monitoring, threat detection, incident investigation, and response activities. The candidate will be responsible for identifying potential security threats, analysing complex incidents, improving detection capabilities, and supporting the SOC team in maintaining an effective security monitoring environment.

The ideal candidate should have strong hands-on experience with SIEM, EDR/XDR, threat intelligence, incident response, and security operations.

Key Responsibilities

- Monitor and analyse security alerts generated through SIEM, EDR, and other security monitoring platforms.
- Investigate and respond to complex security incidents, including malware infections, phishing attacks, ransomware, privilege escalation, and suspicious network activities.
- Perform advanced log analysis, event correlation, threat hunting, and root cause analysis.
- Develop, fine-tune, and optimise SIEM correlation rules, detection use cases, and alerting mechanisms.
- Conduct proactive threat hunting using Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and threat intelligence feeds.
- Analyse network traffic, endpoint activities, authentication logs, and system events to identify malicious behaviour.
- Lead incident response activities, including containment, eradication, recovery, and post-incident analysis.
- Map detected threats and attack techniques to the MITRE ATT&CK; framework.
- Prepare detailed incident reports, investigation findings, and security dashboards.
- Coordinate with IT, infrastructure, and security teams to remediate identified vulnerabilities and security incidents.
- Mentor junior SOC analysts and support L1/L2 SOC operations.
- Participate in developing and improving SOC processes, incident response playbooks, and standard operating procedures (SOPs).

Required Technical Skills

- SIEM Tools:



Splunk, IBM QRadar, Microsoft Sentinel, LogRhythm, or Wazuh.
- EDR/XDR Tools: CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or Cortex XDR.
- Network Security: Firewall logs, IDS/IPS, VPN, DNS, proxy logs, and network traffic analysis.
- Incident Response: Malware analysis, phishing investigation, endpoint investigation, and forensic analysis.
- Threat Intelligence: IOC analysis, threat intelligence platforms, and threat hunting.
- Security Frameworks: MITRE ATT&CK;, NIST Cybersecurity Framework, and incident response lifecycle.
- Operating Systems: Windows, Linux, and Active Directory security.
- Scripting: Python, PowerShell, or Bash for security automation and log analysis.
- Cloud Security: Basic understanding of AWS, Azure, or GCP security monitoring.

Mandatory Skills

- Solid hands-on experience in SIEM monitoring and incident investigation.
- Advanced knowledge of security event correlation and threat detection.
- Experience handling and responding to security incidents independently.
- Strong understanding of network protocols, operating systems, and security architecture.
- Experience in threat hunting and security log analysis.
- Ability to guide and mentor junior SOC analysts.

Preferred Qualifications

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Certifications such as:
- CompTIA CySA+
- GCIA / GCIH / GCED
- CEH
- Splunk Enterprise Security Certified Admin
- CISSP/ OSDA

Experience Requirements

- 2–7 years of overall experience in Security Operations.
- Minimum 2 years of hands-on experience in SIEM and security incident investigation.
- Experience working in a 24/7 SOC setting is preferred.
- Prior experience handling enterprise-level security incidents is an added advantage.

Pay: Up to ₹700,000.00 per year

Perks:

- Health insurance
- Provident Fund

Work Location: In person

📌 Security Analyst (T. Nagar)
🏢 Briskinfosec Technology and Consulting private
📍 T. Nagar