Cyber Security Specialist/SOC Analyst

IT Support Desk; Bengaluru; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

IT Support Desk in Bengaluru is seeking a security operations professional to monitor, triage, and analyze security events on a 24/7 basis, including malware analysis. The role requires experience in SOC or incident response and relevant certifications.

You will coordinate responses across a global organization, analyze email threats, threat intel, cloud security, and work with SIEM tools to build detection and response playbooks.

Qualifications

• Diploma/Bachelors/Master’s degree required.
• 4–5 years of SOC or incident response experience.
• At least one security certification from the listed set.
• Willing to work in 24/7 shifts.

Responsibilities

• Responsible for 24/7 monitor, triage, analyzing security events and alerts, including malware analysis.
• Experience coordinating incident response, troubleshooting, or other complex issues across a global organization.
• Familiarity with core concepts of security incident response, e.g., the typical phases of response, vulnerabilities vs threats vs actors, IoCs, etc.
• Strong knowledge of email security threats and security controls, including experience analyzing email headers.
• Good understanding of Threat Intel and Hunting.
• Strong technical understanding of network fundamentals and Internet protocols (DNS, HTTP, HTTPS/TLS, SMTP).
• Experience analyzing network traffic using Wireshark to investigate security or operational issues.
• Experience reviewing system and application logs to investigate security or operational issues.
• Strong knowledge in investigating security issues within Cloud infrastructure such as AWS, GCP, Azure.
• Good knowledge and hands-on experience with SIEM tools (Splunk, AlienVault, QRadar, ArcSight) in creating detection/ correlation rules.
• Experience in defining use cases for playbooks and runbooks.
• Experience in understanding log types and log parsing.
• Strong passion in information security and awareness of current threats and best practices.
• Good understanding of CIS requirements.

Skills

SOC experience

Incident response

Threat hunting

Email security

Threat intel

Cloud security

SIEM analysis

Network fundamentals

Network protocols

Log analysis

Playbooks & runbooks

Education

Diploma / Bachelors / Masters Degree

Tools

Splunk

AlienVault

QRadar

ArcSight

Job description

Eligibility Criteria

• Qualifications: Diploma / Bachelors / Masters Degree
• Minimum of 4-5 years of experience in a Security Operations Centre (SOC) or incident response team
• Security+ , CEH, CISSP, OSCP, CHFI, ECSA, GCIH, GCIA, GSEC, GCFA , Cisco Cyber OPS certification (At least one valid certification)
• Flexible to work in 24/7 shifts

Job Description: Roles and Responsibilities

• Responsible for 24/7 monitor, triage, analyzing security events and alerts. Including Malware analysis (including reverse engineering)
• Experience coordinating incident response, troubleshooting, or other complex issues across a global organization
• Familiarity with core concepts of security incident response, e.g., the typical phases of response, vulnerabilities vs threats vs actors, Indicators of Compromise (IoCs), etc
• Strong knowledge of email security threats and security controls, including experience analyzing email headers
• Good understanding of Threat Intel and Hunting
• Strong technical understanding of network fundamentals and common
• Internet protocols, specifically DNS, HTTP, HTTPS / TLS, and SMTP
• Experience analyzing network traffic using tools such as Wireshark, to investigate either security issues or complex operational issues
• Experience reviewing system and application logs (e.g., web or mail server logs), either to investigate security issues or complex operational issues
• Strong knowledge in investigating security issues within Cloud infrastructure such as AWS, GCP, Azure.
• Good knowledge and hands-on experience with SIEM tools such as Splunk, AlienVault, QRadar, ArcSight or similar in creating new detection rules, correlation rules etc
• Experience In defining use cases for playbooks and runbooks.
• Experience in understanding log types and log parsing
• Strong passion in information security, including awareness of current threats and security best practices.
• Good understanding of CIS requirements .