Engineer-Cybersecurity

Birlasoft ( India ) Limited; India; On-site; INR 600,000 - 900,000; Full time

Job summary

Birlasoft ( India ) Limited in Noida is seeking a security analyst to monitor and manage security incidents. The role involves continuous monitoring of SIEM, EDR, and firewall activities while performing initial triage and escalation of incidents.

Candidates should have experience in vulnerability management and be prepared to maintain detailed incident records, document playbook improvements, and assist in SOC reporting for effective incident management.

Qualifications

• Experience in Vulnerability management.

Responsibilities

• Continuously monitor SIEM, EDR, IDS/IPS, firewalls, and log sources for suspicious activity.
• Perform initial triage and classification of alerts based on severity, scope, and impact.
• Escalate validated incidents to L2 SOC analysts in line with SOC playbooks and escalation matrix.
• Verify log ingestion and forwarding from SIEM, EDR, IDS/IPS, and other security platforms.
• Identify tool or data gaps and elevate to L2 SOC or security engineering teams.
• Maintain accurate and detailed incident records, triage notes, and escalation details.
• Document recurring false positives and suggest playbook improvements.
• Create and update tickets in the SOC case management system.
• Serve as the first point of contact for customer-reported security incidents.
• Perform preliminary analysis of suspicious emails, URLs, and attachments.
• Follow MSSP and customer-specific SLA-driven escalation workflows.
• Review vulnerability scan reports and elevate high-severity findings to L2/security engineers.
• Assist in preparing daily/weekly SOC dashboards, reports, and metrics for management and customers.

Job description

Location: INDIA - NOIDA- BIRLASOFT OFFICE

Area(s) of responsibility

• Continuously monitor SIEM, EDR, IDS/IPS, firewalls, and log sources for suspicious activity.
• Perform initial triage and classification of alerts based on severity, scope, and impact.
• Escalate validated incidents to L2 SOC analysts in line with SOC playbooks and escalation matrix.
• Verify log ingestion and forwarding from SIEM, EDR, IDS/IPS, and other security platforms.
• Identify tool or data gaps and elevate to L2 SOC or security engineering teams.
• Maintain accurate and detailed incident records, triage notes, and escalation details.
• Document recurring false positives and suggest playbook improvements.
• Create and update tickets in the SOC case management system.
• Serve as the first point of contact for customer-reported security incidents.
• Perform preliminary analysis of suspicious emails, URLs, and attachments.
• Follow MSSP and customer-specific SLA-driven escalation workflows.
• Review vulnerability scan reports and elevate high‑severity findings to L2/security engineers.
• Assist in preparing daily/weekly SOC dashboards, reports, and metrics for management and customers.

Qualifications

• Experience in Vulnerability management