Job Summary: Experience Profile (3 Years SOC Analyst)

✔ 3+ years in SOC Monitoring & Incident Handling

✔ Hands-on Logpoint (GuardSIX) SIEM operations

✔ Experience in alert triage and incident investigation

✔ Familiarity with MITRE ATT&CK; and Threat Hunting

✔ Working experience in a 24x7 SOC environment

Location: Hyderabad

Shift: 24x7 Rotational Shifts

Work Location: 5 days work from office(we can discuss about Night shifts)

Key Responsibilities

Security Monitoring & Incident Detection (Must have)

- Monitor security events and alerts generated from Logpoint SIEM (GuardSIX) and integrated security tools.
- Perform real-time analysis of security incidents and suspicious activities.
- Investigate alerts related to malware, phishing, ransomware, insider threats, privilege misuse, and unauthorized access.
- Validate and triage security alerts based on severity and business impact.
- Escalate incidents to L2 & L3 teams and stakeholders as per defined procedures.

Incident Response & Investigation (Must Have)

- Conduct incident investigations using SIEM queries and threat intelligence sources.

- Analyze logs from:

- Windows Servers & Workstations

- Linux Systems

- Active Directory

- Firewalls

- IDS/IPS

- Proxy and Web Gateways

- EDR/XDR Solutions

- Cloud Platforms (Azure, AWS, GCP)

- Perform root cause analysis and incident documentation.

- Support containment, eradication, and recovery activities.

Threat Hunting & Threat Intelligence (Must have)

- Execute proactive threat hunting activities using Logpoint searches.
- Leverage MITRE ATT&CK; framework for threat mapping.
- Analyze Indicators of Compromise (IoCs).
- Correlate threat intelligence feeds with internal security events.
- Identify anomalous user and system behaviors.

Logpoint SIEM Administration & Use Case Monitoring (Positive to have)

- Create, modify,



and tune Logpoint correlation rules and use cases.
- Fine-tune alert thresholds to reduce false positives.
- Develop dashboards, reports, and custom searches.
- Monitor log collection health and data ingestion.
- Validate parser functionality and troubleshoot log collection issues.
- Perform use case validation and testing.

Required Technical Skills

SIEM

- Hands-on experience with:

- Logpoint SIEM (GuardSIX) - Mandatory

- Experience with Splunk/QRadar/Microsoft Sentinel (preferred)

Security Technologies

- Firewalls (Palo Alto, Fortinet, Check Point, Cisco)
- IDS/IPS (Snort, Suricata, Trend Micro)
- EDR/XDR (Microsoft Defender, CrowdStrike, SentinelOne)
- Web Proxy Solutions
- Vulnerability Management Tools

Operating Systems

- Windows Administration
- Linux Administration

Networking

- TCP/IP
- DNS
- DHCP
- VPN
- HTTP/HTTPS
- SMTP
- Network Security Concepts

Required Knowledge

- Cyber Kill Chain
- MITRE ATT&CK; Framework
- Security Incident Response Lifecycle
- Threat Intelligence Concepts
- Malware Analysis Fundamentals
- Security Monitoring Best Practices
- SOC Processes and Procedures
- Event Correlation Techniques

Qualifications :

- Bachelor's Degree in Computer Science, Information Security, IT, or related field.
- 3+ years of experience in SOC operations.
- Experience working in 24x7 rotational shifts.
- Strong analytical and troubleshooting skills.
- Excellent verbal and written communication skills.

Preferred Certifications

- CompTIA Security+
- CEH (Certified Ethical Hacker)
- SC-200 (Microsoft Security Operations Analyst)
- Logpoint Certified Analyst (preferred)

Key Performance Indicators (KPIs)

- Incident Response SLA Compliance
- Mean Time to Detect (MTTD)
- Mean Time to Respond (MTTR)
- Alert Triage Accuracy
- Use Case Effectiveness
- Threat Hunt Outcomes
- Reduction in False Positive Alerts

📌 Digital Security - SOC Services (Hyderabad)
🏢 Zensar Technologies
📍 Hyderabad