L1 SOC Analyst

UST; Hyderabad; On-site; INR 700,000 - 1,100,000; Full time

Job summary

UST is seeking a security-focused professional to monitor logs, SIEM tools, and network traffic, identifying anomalies and coordinating incident response. The role involves postmortem analysis, reporting, and remediation planning to protect enterprise assets.

The candidate will work with client IT and security teams, develop runbooks, and maintain security documentation while keeping up with threat intelligence and vulnerability trends.

Qualifications

• Experience with SIEM vendors such as QRadar, ArcSight, RSA, LogRhythm.
• Experience in incident response, writing procedures runbooks and playbooks.
• Ability to work with customer's IT and security teams as well as directors’ level.

Responsibilities

• Advanced monitoring of system logs, SIEM tools and network traffic for unusual activity.
• Investigate and resolve security incidents with postmortem analysis and recommended fixes.
• Produce monthly reports by collating security event data and exceptions.
• Maintain and update security documentation and procedures.
• Collaborate with security team to identify vulnerabilities and tests.

Skills

SIEM

Incident Management

Vulnerability Assessment

Job description

Role Description

Advanced monitoring of system logs, SIEM tools and network traffic for unusual or suspicious activity. SIEM (Security Information and Event Management): Setting up various SIEM solutions and troubleshooting connectivity issues. Investigate and resolve security violations by providing postmortem analysis to illuminate the issues and possible solutions. Collate security incident and event data to produce monthly exception and management reports. Report unresolved network security exposures, misuse of resources or noncompliance situations using defined escalation processes. Develop and maintain documentation for security systems and procedures. Recommend, schedule and/or apply fixes, security patches and any other measures required in the event of a security breach. Analysis and review of logs and cyber event s Investigate suspicious security event activity, security breaches and other cyber security incidents Assess damage, document findings and recommendations Work with security team to perform tests and uncover network vulnerabilities Maintain and enforce adherence to corporate procedures, standards and policies Maintain and update functionality and procedures of the documentation Keep up to date with latest security information and threat intelligence Research the latest information technology (IT) security trends Validate security analysis and identify latest capabilities of the monitoring technologies Research and understand the currently published vulnerabilities of enterprise hardware, software, operating systems, appliance, and applications etc Gather and distribute technical information pertaining to new security threats and vulnerability trends Produce reporting and documentation to customers, internal team and management. Experience & Qualifications Required Experience working with different Siem vendors like Qradar, Archsight, RSA, Logrythem Experience in incident response, writing procedures runbooks and playbooks Ability to work with customer's IT and security teams as well as directors’ level.

Skills

• SIEM
• Incident Management
• Vulnerability Assessment