Administrator (Support & Operations)

HCL Technologies Limited; Greater Noida; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

HCLTech is seeking a qualified SOC Analyst to monitor and analyze security events in a 24x7 SOC environment. You will triage alerts, escalate incidents, and mentor junior analysts while leading incident response activities and threat research.

Collaborate with engineering to implement updated security controls and support audits by providing evidence. Strong experience in EDR, WAF, NIDS, and ITSM processes is preferred.

Qualifications

• : Advanced SIEM capabilities for investigating events and detecting threats.
• :
• Strong knowledge of Windows Active Directory, Group Policies, and PowerShell scripting.
• :
• Proficient in log analysis across Windows, Linux, Azure, O365, AWS, Google Cloud, network and endpoint controls.
• :
• Familiarity with the MITRE ATT&CK framework for adversary tactics and techniques.
• :
• Experience in malware analysis and working with EDR solutions.
• :
• Knowledge of content filtering technologies in enterprise environments.
• :
• Solid understanding of networking fundamentals (OSI, TCP/IP, DNS, HTTP, SMTP).
• :
• Hands-on with AWS, Google Cloud, and Microsoft Azure.

Responsibilities

• Monitor and analyze security events as part of a 24x7 SOC.
• Perform daily triage of alerts and tickets, escalate incidents as needed.
• Act as escalation point for SOC analysts and mentor juniors.
• Lead incident response activities and conduct technical investigations.
• Conduct threat research to enhance SIEM use cases and playbooks.
• Proactive threat hunting without predefined IOCs.
• Collaborate with engineering to implement new security solutions.
• Support security tools including EDR, WAF, and NIDS.
• Automate repetitive SOC tasks using scripting/workflow tools.
• Troubleshoot log issues to minimize business disruption and meet SLAs.
• Support audits by providing evidence.
• Participate in DR drills, security assessments, and risk mitigation.
• Work within ITSM to manage incidents, changes, and service requests.

Skills

SIEM expertise

Active Directory

PowerShell

Log analysis

MITRE ATT&CK

Malware analysis

Content filtering

Networking fundamentals

Cloud platforms

Tools

EDR

WAF

NIDS

Cloud platforms

Job description

• Monitor and analyze security events and threats as part of a 24x7x365 SOC environment.
• Perform daily triage of alerts and tickets, leveraging threat intelligence and escalating incidents as needed.
• Act as a technical escalation point for SOC analysts and mentor junior team members.
• Lead incident response activities, conducting technical investigations and providing expert guidance.
• Conduct cyber threat research to enhance SIEM use cases and playbook development.
• Perform proactive threat hunting and investigations without predefined indicators of compromise.
• Collaborate with engineering teams to evaluate and implement new or updated security solutions.
• Support and manage security tools including EDR, WAF, and NIDS platforms.
• Automate repetitive SOC tasks to improve operational efficiency and reduce manual errors, using scripting and workflow tools.
• Troubleshoot and resolve log related issues, ensuring minimal disruption to business operations and adherence to SLAs.
• Support internal and external audits by providing evidence.
• Participate in disaster recovery drills, security assessments, and SOC-related risk mitigation activities.
• Work within ITSM frameworks to manage incidents, changes, and service requests

Key Responsibilities

• Monitor and analyze security events and threats as part of a 24x7x365 SOC environment.
• Perform daily triage of alerts and tickets, leveraging threat intelligence and escalating incidents as needed.
• Act as a technical escalation point for SOC analysts and mentor junior team members.
• Lead incident response activities, conducting technical investigations and providing expert guidance.
• Conduct cyber threat research to enhance SIEM use cases and playbook development.
• Perform proactive threat hunting and investigations without predefined indicators of compromise.
• Collaborate with engineering teams to evaluate and implement new or updated security solutions.
• Support and manage security tools including EDR, WAF, and NIDS platforms.
• Automate repetitive SOC tasks to improve operational efficiency and reduce manual errors, using scripting and workflow tools.
• Troubleshoot and resolve log related issues, ensuring minimal disruption to business operations and adherence to SLAs.
• Support internal and external audits by providing evidence.
• Participate in disaster recovery drills, security assessments, and SOC-related risk mitigation activities.
• Work within ITSM frameworks to manage incidents, changes, and service requests

Skill Requirements

• Advanced expertise in using SIEM technologies for event investigation and threat detection.
• Strong knowledge of Windows Active Directory, Group Policies, and PowerShell scripting.
• Proficient in log analysis across Windows, Linux, Azure, O365, AWS, Google Cloud, network, and endpoint security controls.
• Familiarity with the MITRE ATT&CK framework for understanding adversary tactics and techniques.
• Experience in malware analysis and working with Endpoint Protection and EDR solutions.
• Knowledge of content filtering technologies and their application in enterprise environments.

• Solid understanding of network fundamentals including OSI model, TCP/IP, DNS, HTTP, SMTP, and packet capture/analysis.
• Hands-on experience with cloud platforms such as AWS, Google Cloud, and Microsoft Azure.
• Deep understanding of malware capabilities, attack vectors, and their potential impact.
• Skilled in threat analysis and vulnerability assessment methodologies.
• Experience with vulnerability scanning tools and technologies.
• Working knowledge of firewalls, VPN technologies, IDS/IPS, and web application firewalls.
• Familiarity with host-based intrusion detection systems.
• Proven experience in incident response and a solid understanding of IT Service Management (ITSM) processes such as change, incident, and problem management.

Mandatory Soft Skills

• Excellent communication and interpersonal skills both written and oral.
• Client relationship management
• Ability to work hands on tools and processes.
• Willing to work 24x7 project timelines

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026totaled $14.8billion.