Cyber Security Analyst

ESDS Software Solution Limited; Nashik District; On-site; INR 400,000 - 700,000; Full time

Job summary

ESDS Software Solution Limited seeks a skilled L2 SOC analyst to monitor and analyze security events, convert incidents into tickets, and coordinate remediation with customers and internal teams. The role includes VAPT assistance, security audits support, and report preparation.

Candidate will handle SOC infrastructure, SIEM configurations, and policy testing, while maintaining logs, patching, and adherence to SLAs. A strong IT security background and PCI-DSS/ISO awareness are desired.

Qualifications

• Graduate in computer science, information technology, engineering, or a related field.
• Knowledge and hands-on experience in Managing L2 SOC role.
• Deep knowledge on Cyber security, SIEM and capability of log analysis and in writing correlation and other security rules.

Responsibilities

• Upkeep of SOC related infrastructure like monitoring platforms, SIEM etc.
• Setup of SOC equipment and configuration as required.
• Part of 24x7x365 SOC operations and will work in assigned shifts.
• Coordinate and add customers to the Monitoring Systems.
• Continuous monitoring and conversion of security incidents into tickets with false positive reduction.
• Respond to tickets with a security-focused approach for timely resolution per SLA.

Skills

L2 SOC

SIEM

Log analysis

Incident management

Threat detection

Education

Graduation in CS/IT

Tools

SIEM platforms

IDS/IPS

IDAM/NAC

DLP

Job description

Job Overview:

This role is responsible for Security incident monitoring for Customers who have subscribed to our SOC Monitoring services and to convert it to incidents based on analysis and work towards remediation of the same through customers, Partners, Internal team etc. This team member also works on conducting VAPT for customers and will also be used for Security assessment at customer site as required. The L2 team member also assists in customer Security audits and in preparation of reports before they are sent to customers.

Responsibilities and Duties:

• Upkeep of SOC related infrastructure like monitoring platforms, SIEM etc.
• Involvement in Setup of SOC equipment’s and configuration of the same as required.
• Will be a part of 24X7X365 SOC operations and will need to work in assigned shifts
• Coordinating and adding customers to the Monitoring Systems
• Continuous Monitoring of Customers and ESDS environment and conversion of Security incidents into tickets by eliminating false positives.
• Working on tickets raised by customer on Security Incidents or change request and responding with a Security focused approach in coordination with departments internally and with Customers for timely resolution of Tickets as per defined SLA and to reduce risk from security incidents.
• Checking and monitoring archive and audit logs
• Creating and Testing new policies as per Company/Customer requirement
• Patch implementation and General SOC Administration
• Generating reports by collating reports from various tools periodically as per SLA with Customer & sending the same to the Customer
• Participating in Customer and internal Security Audits and addressing issues raised.
• Creating & Testing new policies as per company requirement and implementing the same
• Updating Knowledge and Skills on Security including being abreast with latest Security incidents and Threats
• Installation, configuration and troubleshooting of SIEM, IDS, IPS, IDAM, NAC, DLP tools
• Participating in Incident Validation, Incident Analysis, solution recommendation and resolution of escalated tickets.
• Scheduling and Performing the VA Scans and submitting the scan report with the management/client and resolves queries based on scan performed.
• Performing PT and ethical intrusions as required for customers & ESDS to arrive at Gaps in security environment and provide recommendations

Qualification:

• Graduate in computer science, information technology, engineering, or a related field
• Knowledge and hands-on experience in Managing L2 SOC role.
• Should have Deep knowledge on Cyber security, SIEM and capability of log analysis and in writing correlation and other Security rules to enable detection of security incidents.
• Excellent analytical and troubleshooting skills.
• Should have understanding of deployment for various compliance like PCI-DSS, ISO 27001 etc.

Preferred Certifications:

• CEH, COMPTIA +
• Up to date and relevant ITIL certification
• VMware Certified Professional / Advance Professional
• MCSA / MCSE / MCITP
• RHCE or equivalent
• Citrix Certified Professional/ Expert – Virtualization (CCP-V)
• Citrix XenServer Certified (CC-XenServer)
• Amazon Certified Professional
• Google Certified Professional

Key Attributes:

• Willing to work in 24x7 environment in not just limited to night shifts.
• Process driven, operationally focused
• Professional and positive, with outstanding customer-facing practices
• Analytical and diligent, with great attention to detail
• Resilient: ability to cope successfully under pressure and with shifting priorities
• Effective collaborator and communicator at all levels
• Self-motivated and self-sufficient enthusiastic team player, able to work on own initiative
• Assertive, adaptable, collaborative and creative
• Can-do attitude, willing to go the extra mile
• Awareness: in touch with the day-to-day challenges of the Team.
• Consistently follows-up and follows-through on delegated tasks and action.
• Have a strong understanding of incident SLA management & ITIL concepts.