Cyber Security SOC - Technical Specialist-Cybersecurity

Country/Region: IN

Requisition ID: 40588

Work Model

Position Type

Salary Range

Location: INDIA \- HYDERABAD \- BIRLASOFT OFFICE

• *Title:** **Cyber Security SOC \- Technical Specialist\-Cybersecurity**

========================================================================

Description

• *Area(s) of responsibility**
• ----------------------------

Cyber Security SOC Analyst

• *Job Responsibilities:**

• **Incident and Data breach handling experience** (example Ransomware, Malware attack etc.)
• **Understanding and defending knowledge in Cyber Security (Ex. Blue Teaming, MITRE ATT\&CK Matix, Cyber Kill Chain, NIST CSF etc.)**
• Alerts identification (example identify false positive) and incident triaging
• Understanding about Security Incident Event Management **(SIEM) and SOC Operations**
• Monitor, detect and respond to threats in customer environments using our SOC platform
• Tune threat detection for both general and specific customer environments to minimize false positive and amplify productivity
• Understanding and implementing knowledge on **EDR Platform (Ex. Crowdstrike)**
• Maintain \& formulate Standard Operating Procedures for SOC Security Services
• Maintain proficiency by following the latest trends and developments in cybersecurity
• Report presentation to stakeholders
• Maintain proficiency by following the latest trends and developments in cybersecurity
• Act as an escalation resource for Open Systems SOC Security Analysts who are triaging security events and observations to identify potential threats
• Create reports for customers and internal operational use on an ongoing basis
• Broaden coverage of detection by identifying opportunities to acquire, ingest and analyze Data and logs from additional sources and technologies
• Help extend **malware analysis capability**, execute malware triage
• Create and update documentation to support ongoing operations
• Collaborates with Security Operations Center (SOC) Analyst to monitor and analyze security alerts and events.

• *Experience, Skills \& Qualifications**

• Overall Exp: 4 \-6 years
• Strong knowledge of concepts **like Blue Teaming or Purple Teaming, Threat Hunting, EDR, SIEM**
• Experience using EDR (Crowdstrike, Sophos etc.) and SIEM systems (Splunk, Microsoft Sentinel etc.)
• Strong understanding of security operations, process, and procedures with specific reference to incident response and threat intelligence
• Able to work collaboratively on a global basis and help build team capability
• Familiarity with common and latest forms of malware, attacker tools, and techniques
• Strong awareness of the current global threat landscape
• Hands\-on experience installing, configuring, or tuning some or all of the following security technologies: Cyber Security Analytics, Secure web gateways/web proxy, endpoint protection (EPP/AV/HIDS), endpoint detection and response solutions (EDR example Crowdstrike Falcon), DLP/FIM, SSL Certificate Manager and VPN/encryption.
• Azure Security/ AWS Security certifications are added advantages