Cyber Security Analyst

alliantgroup; Hyderabad; On-site; INR 450,000 - 750,000; Full time

Job summary

alliantgroup India Talent Pvt. Ltd in Hyderabad is seeking a Level 2 SOC Analyst to monitor and analyze security alerts, perform log analysis, and triage threats alongside L1 analysts.

The role involves configuring security devices, collaborating with L3 and other teams, following change and incident management, and driving incident remediation and reporting to protect US client environments.

Qualifications

• Monitoring and analysing security alerts escalated by L1 analysts.
• Deep analysis of alerts and triage to identify false positives.
• Analyze logs to gather contextual information for threats.
• Review incident response outputs and workflows.
• Configure and manage security devices (FW, IDS/IPS, WAF, Proxies).
• Collaborate with L3 and other teams to investigate IOCs and TTPs.
• Track incidents and remediation steps to resolution within SLAs.
• Provide mitigation steps and coordinate with device owners.
• Vulnerability remediation tracking and reporting per standards.
• On-the-job training for L1 to handle complex tasks.

Responsibilities

• Monitor and analyze security alerts escalated by L1 analysts.
• Perform analysis of log files to triage the security threat.
• Review manual/semi-automated incident response outputs.
• Security device configuration and management (FW, IDS/IPS, WAF, Proxies).
• Collaborate with L3 and other teams to investigate IOCs and TTPs.
• Analyze and administrate security logs to determine causes or risks.
• Follow change and problem management processes to restore service.
• Continuously update on online attack campaigns and block IOCs.
• Track incidents through closure to meet SLAs.
• Provide mitigation steps and coordinate with device owners.

Skills

Alert monitoring

Alert analysis

Incident handling

Log analysis

Threat intel

Incident response

Security devices

Collaboration

Change management

IOC extraction

Vulnerability tracking

Training teammates

Security incident reporting

Tools

Firewalls

IDS/IPS

WAF

Proxies

Job description

alliantgroup is a management consulting company with a mission to strengthen American businesses through reinvestment in innovation and job growth. We educate businesses, the industry groups that serve them and the accounting firms that advise them on federal and state credits and incentives that are legislated by our government to keep the U.S. competitive in the global landscape.

We are proud to have helped over 18,000 businesses claim more than $10 billion in tax incentives since we opened our doors in 2002. How do we do this? We hire the brightest talent with the most diverse backgrounds who are obsessed and passionate about making a difference

alliantgroup is headquartered in Houston, Texas with additional offices located in Austin, Boston, Chicago, Indianapolis, New York, Irvine, Sacramento, Washington, D.C.; and Bristol and London in the U.K.

alliantgroup India Talent Pvt. Ltd: alliantgroup has set up a world-class office in Hyderabad for providing Tax, Advisory and Audit services to US clients.

Job Designation: Level 2 SOC Analyst

• Monitoring and analyzing of security alerts escalated by L1 analysts
• Deep analysis of the alerts filtered by L1 Analysts, Check for false positive & duplicates
• Perform analysis of log files to collect more contextual information to triage the security threat
• Review manual/semi-automated incident response outputs
• Security Device Configuration and Management (FW, IDS/IPS, WAF, Proxies etc.)
• Collaboration with L3 and other technical teams to investigate new IOCs and TTPs
• Analyze and Administrate security related logs and events via console activity to determine cause of security related events or to identify potential security related risks.
• Referring use case document for identified threats and performing steps as mentioned in the document
• Work with relevant level support team and follow it up to closure
• Follow change management and problem management process wherever linked and coordinate till restoration of service.
• Continuously updated of any online attack campaign and extracting IOCs to block in security tools.
• Tracks the incident till closure to ensure incidents are resolved within agreed SLAs.
• Providing mitigation steps to resolve security incidents
• Co-ordinating with device owners and suggesting plan of actions to them for mitigation of incidents
• Vulnerability Remediation tracking for all vulnerabilities and reporting in accordance with Customer format/standard
• Regularly review and align priority, severity, and classification of security incidents.
• Work with L1 to provide them on the job training to handle complex tasks
• The resource must have extensive experience in incident handling and reporting.