Bengaluru
Full-Time
Mid-Level: 4 to 6 years
7L - 9L (Per Year)
Posted on Apr 26 2024

Not Accepting Applications

About the Job

Skills

SOC
Security Operations Centre
End Point Detection and Response
Security Information And Event Management (SIEM)
Cyber Threat Hunting (CTH)
Cybersecurity

Job Responsibilities: • Perform monitoring, identification, investigation, documentation, resolution, and reporting of security alerts through prioritization of events based on risk/exposure. • Analyze Endpoint Detection and Response (EDR), Network, Cloud and other traffic and log data for potential threats or vulnerabilities. • Generating tickets and incident reports to external clients and Tier 3 analysts. • Remediate and apply lessons learned to security incident investigation and resolution. • Develop processes that align with enterprise incident response activities and coordinate closely with other teams within the Security Operations Center. • Investigate suspicious activities and content and prevent them. • Follow strict security and SOC guidelines and SOPs. • Threat hunting, Threat intelligence, deep investigation of alerts • Identifying the new use cases and Strong analytical skills to assess the alerts. • Integrate new logging sources and build playbooks to properly triage and respond to security incidents while reducing the time needed to analyze each event. • Assess, design, and improve SOC processes and workflows with a focus on integrating automation through Security Orchestration, Automation and Response (SOAR) tools and technologies. • Create custom content to enhance capabilities of security operations Center. • Create custom analytics, dashboards, and reports. • Respond to customer or Tier 1 analyst tickets within target objectives. • Create new detection rules. Qualifications: • Proven experience in a SOC with at least 4-6 years of experience • Understanding of Managed Security Services. • Well versed with Incident Response Framework • Experience with Endpoint Detection and Response (EDR) tools • Experience with an industry leading SIEM technology (SIEM administration will be a plus) • Understanding of key IT/Cybersecurity concepts (Network Security, Security Operations & Administration, Managed Detection and Response, Incident Response & Recovery, Vulnerability Management, etc.) • Good interpersonal skills to interact with customers, team members and support personnel. • Analytical and Problem-Solving Skills • Written and Verbal communication skills. • Motivated self-starter • Willing to work in 24*7 shifts on rotation basis

About the company

We provide Technology, Infrastructure and People solutions, carefully crafted by our team of problem solvers and technologists, to de-risk operations, unhinge growth and future-proof your business. Range of solutions across Technology, Infrastructure, and People that are focused on delivering a superior experience and better ROI at price points that make sense Our expertise is always on point with ...Show More

Industry

IT Services and IT Consul...

Company Size

51-200 Employees

Headquarter

Bangalore

Other open jobs from Netlabs Global IT Services Pvt Ltd