Cyber Security SOC Technical Specialist Cybersecurity
Birlasoft · IT Services & Consulting
- Hyderabad, India
- On-site
- Posted 2 days ago
- Cybersecurity
About the job
Area(s) of responsibility
Cyber Security SOC Analyst
Job Responsibilities:
Incident and Data breach handling experience (example Ransomware, Malware attack etc.)
Understanding and defending knowledge in Cyber Security (Ex. Blue Teaming, MITRE ATT&CK Matix, Cyber Kill Chain, NIST CSF etc.)
Alerts identification (example identify false positive) and incident triaging
Understanding about Security Incident Event Management (SIEM) and SOC Operations
Monitor, detect and respond to threats in customer environments using our SOC platform
Tune threat detection for both general and specific customer environments to minimize false positive and amplify productivity
Understanding and implementing knowledge on EDR Platform (Ex. Crowdstrike)
Maintain & formulate Standard Operating Procedures for SOC Security Services
Maintain proficiency by following the latest trends and developments in cybersecurity
Report presentation to stakeholders
Maintain proficiency by following the latest trends and developments in cybersecurity
Act as an escalation resource for Open Systems SOC Security Analysts who are triaging security events and observations to identify potential threats
Create reports for customers and internal operational use on an ongoing basis
Broaden coverage of detection by identifying opportunities to acquire, ingest and analyze Data and logs from additional sources and technologies
Help extend malware analysis capability , execute malware triage
Create and update documentation to support ongoing operations
Collaborates with Security Operations Center (SOC) Analyst to monitor and analyze security alerts and events.
Experience, Skills & Qualifications
Overall Exp: 4 -6 years
Strong knowledge of concepts like Blue Teaming or Purple Teaming, Threat Hunting, EDR, SIEM
Experience using EDR (Crowdstrike, Sophos etc.) and SIEM systems (Splunk, Microsoft Sentinel etc.)
Strong understanding of security operations, process, and procedures with specific reference to incident response and threat intelligence
Able to work collaboratively on a global basis and help build team capability
Familiarity with common and latest forms of malware, attacker tools, and techniques
Strong awareness of the current global threat landscape
Hands-on experience installing, configuring, or tuning some or all of the following security technologies: Cyber Security Analytics, Secure web gateways/web proxy, endpoint protection (EPP/AV/HIDS), endpoint detection and response solutions (EDR example Crowdstrike Falcon), DLP/FIM, SSL Certificate Manager and VPN/encryption.
Azure Security/ AWS Security certifications are added advantages