Cyber Security SOC - Technical Specialist-Cybersecurity

Birlasoft; Elsene; Sur place; EUR 8 400 - 12 000; Plein temps

Résumé du poste

Birlasoft in Hyderabad is seeking a Cyber Security SOC - Technical Specialist to join our Security Operations team. You will analyze security alerts, triage incidents, and support data breach handling, applying MITRE, NIST CSF, and blue team techniques.

The role requires hands-on use of EDR (CrowdStrike, others) and SIEM (Splunk, Microsoft Sentinel), plus experience with threat intelligence, malware analysis, and reporting to stakeholders.

Qualifications

• Hands-on experience with security operations and incident response.
• Familiarity with MITRE ATT&CK, NIST CSF and related frameworks.
• Experience with detection engineering and threat intel.
• Experience using EDR and SIEM platforms.
• Understanding malware analysis and incident reporting.

Responsabilités

• Incident and data breach handling experience.
• Defend knowledge of Cyber Security concepts (Blue Teaming, MITRE ATT&CK, etc.).
• Alerts identification and incident triaging.
• Monitor, detect and respond to threats using SOC platform.
• Tune threat detection to reduce false positives and increase productivity.
• Maintain SOPs for SOC Security Services.
• Report findings to stakeholders.
• Collaborate with SOC Analysts to monitor security events.

Connaissances

Blue Teaming

Threat Hunting

EDR

SIEM

Malware Analysis

Outils

CrowdStrike

Splunk

Microsoft Sentinel

Description du poste

Select how often (in days) to receive an alert:

Location: INDIA - HYDERABAD - BIRLASOFT OFFICE

Title: Cyber Security SOC - Technical Specialist-Cybersecurity

Description:

Area(s) of responsibility

Cyber Security SOC Analyst

Job Responsibilities:

• Incident and Data breach handling experience (example Ransomware, Malware attack etc.)
• Understanding and defending knowledge in Cyber Security (Ex. Blue Teaming, MITRE ATT&CK Matix, Cyber Kill Chain, NIST CSF etc.)
• Alerts identification (example identify false positive) and incident triaging
• Understanding about Security Incident Event Management (SIEM) and SOC Operations
• Monitor, detect and respond to threats in customer environments using our SOC platform
• Tune threat detection for both general and specific customer environments to minimize false positive and amplify productivity
• Understanding and implementing knowledge on EDR Platform (Ex. Crowdstrike)
• Maintain & formulate Standard Operating Procedures for SOC Security Services
• Maintain proficiency by following the latest trends and developments in cybersecurity
• Report presentation to stakeholders
• Maintain proficiency by following the latest trends and developments in cybersecurity
• Act as an escalation resource for Open Systems SOC Security Analysts who are triaging security events and observations to identify potential threats
• Create reports for customers and internal operational use on an ongoing basis
• Broaden coverage of detection by identifying opportunities to acquire, ingest and analyze Data and logs from additional sources and technologies
• Help extend malware analysis capability, execute malware triage
• Create and update documentation to support ongoing operations
• Collaborates with Security Operations Center (SOC) Analyst to monitor and analyze security alerts and events.

Experience, Skills & Qualifications

• Overall Exp: 4 -6 years
• Strong knowledge of concepts like Blue Teaming or Purple Teaming, Threat Hunting, EDR, SIEM
• Experience using EDR (Crowdstrike, Sophos etc.) and SIEM systems (Splunk, Microsoft Sentinel etc.)
• Strong understanding of security operations, process, and procedures with specific reference to incident response and threat intelligence
• Able to work collaboratively on a global basis and help build team capability
• Familiarity with common and latest forms of malware, attacker tools, and techniques
• Strong awareness of the current global threat landscape
• Hands-on experience installing, configuring, or tuning some or all of the following security technologies: Cyber Security Analytics, Secure web gateways/web proxy, endpoint protection (EPP/AV/HIDS), endpoint detection and response solutions (EDR example Crowdstrike Falcon), DLP/FIM, SSL Certificate Manager and VPN/encryption.
• Azure Security/ AWS Security certifications are added advantages