Monitor security events, detect and analyze potential security incidents for resolution as a SOC Analyst L1. Assist with incident response, vulnerability management, and security architecture. Provide timely and accurate reports on security incidents and threats to improve overall security posture.

PREFERRED KERALA / TAMILNADU CANDIDATES

Skills

• SOC Analyst
• SIEM
• Linux
• Scripting
• Security Threats
• Cyber Attack
• Teamwork
• Analytical skills
• Multitasking

Requirements

• Job Role SOC ANALYST L1
• Job Type Full Time
• Workplace Type Onsite
• Industry Computer and Network Security

Secondary locations

About

Not provided

Responsibilities

· Monitoring of security incidents in 24x7 rotational shifts.

· Detect Incidents by monitoring the SIEM console, Rules, Reports and Dashboards.

· Ensure incidents are reported as tickets using ticketing tool and handled as per SLA defined for each customer. The Standard SLA time to be taken is 10 mins per incident ticket.

· Monitor the SIEM console resources to identify any anomalies.

· Recognize potential, successful, and unsuccessful intrusion attempts/compromises thorough review and analysis of relevant event detail and summary information.

· Report the confirmed incidents to customers and escalate to them for further to the concerned L2 team.

· Track incident status to closure as per Standard Operating Procedures (SOP) defined.

· First level Triage of events as provided in Standard Operating Procedures and automate analysis if possible.

· Monitor the health of the SIEM tool and create incidents to the engineering team for their action.

· Assist L2 analysts in incident workflow whenever requested.

· Proactively identify vulnerabilities in customer infrastructure environment and suggest updating of SIEM use cases to generate alerts.

· Ensure confidentiality and protection of sensitive customer data.

Other Requirements

Previous working experience as a SOC Analyst for 2 years

· Knowledge and experience on SIEM Platform is Must

Knowledge and experience in operating Windows & Linux Platforms.

· Scripting skill set (Bash, Python, Ruby, Perl, PowerShell) will be considered a plus.

· Hands-on experience with any commercial Security Information and Event Management (SIEM) solution

· In-depth understanding of security threats (preferably OWASP Top 10 vulnerabilities), threat attack methods and the current threat environment

· Basic understanding of common cyber-attacks (e.g., brute force, SYN flood, session hijack, smurf etc.) and their SIEM signatures.

· Must be Collaborative and team oriented.

· Must have appreciable troubleshooting and analytical skills.

· Must be able to multitask in a fast-paced environment.

· Good Understanding of network protocols (TCP/IP stack, SSL/TLS, IPSEC, SMTP/IMAP, FTP, HTTP etc.)

· Good Understanding of Operating System, Web Server, database, and Security devices (firewall/NIDS/NIPS) logs and log formats.

Education Qualification Requirements: -

· Any bachelor’s degree in computer science

· Priority for B. Tech (Computer Science/IT/Electronics/Communication Engineering)

· Mandatory: CEH/Microsoft Certified: Security Operations Analyst Associate (any 1 will do)

· Desirable: SIEM product Certifications /RHCE/CCNA/CCNP

Soft Skills Required

· Strong written and oral communication skills

Good to have

Not provided

About the Company

ValueMentor is a full-fledged Cyber Security Partner helping organizations worldwide to effortlessly manage cyber risks. We offer Risk & Compliance Services, Security Testing & Managed Security Services.