Manager - Captive Operations

Tata Communications Limited; Thane; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Tata Communications Limited is seeking an experienced SOC Specialist with 7-10 years in SIEM administration, incident handling, and threat intelligence. The role focuses on managing ArcSight, LogRhythm, QRadar, and Splunk in a multi-tenant MSSP environment.

You will handle incident validation and analysis, provide recommended solutions, and contribute to SOAR content and playbooks, ensuring secure IT operations and rapid incident response.

Qualifications

• BE/B.Tech or equivalent with minimum 7-10 years of experience.
• Experience in SOC Incident Handling and Incident Response Trend Analysis.
• Administration/monitoring of SIEM tools ArcSight, LogRhythm, Threat Intelligence, Malware Analysis.

Responsibilities

• Experience in SIEM tool administration or troubleshooting in SIEM solutions.
• Incident Validation, Incident Analysis, and Solution Recommendation.
• Fine-tuning ArcSight/LR/QRadar rule bases and platform upgrades.
• Exposure to SOAR, alert aggregation, and playbook creation.
• Coordinate with cross-functional teams for rapid resolution.

Skills

SOC Incident Handling

Incident Response

Threat Intelligence

Malware Analysis

SIEM Administration

Education

BE/B.Tech or equivalent

Tools

ArcSight

LogRhythm

QRadar

Splunk

Job description

About The Company

Tata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of Communications

Roles/Responsibilities

• Experience in SIEM Tool like ArcSight, LogRhythm SIEM, Threat Intelligence, Malware Analysis, Incident Response
• Experience in handling SOC customer in MSSP/multi-tenant environment
• Responsible for the technical Administration or troubleshooting in SIEM ensuring the efficient functionality of the solution
• Responsible for Incident Validation, Incident Analysis, Solution Recommendation,
• Good knowledge on implementation, installation, integration troubleshooting and overall functionalities of LogRhythm/ArcSight/QRadar/Splunk
• Arc Sight/LR/QRadar platform administration, management experience, platform upgrade
• Experience in troubleshooting platform related issues, Data backup, restoration, retention
• Experience in creating content based on MITRE Framework
• Exposure to SOAR, alert aggregation, automation, Playbook creation
• ArcSight/LR rule base fine tuning, Ongoing log source modifications, Configuration/policy changes, General SIEM Administration, SIEM Content Development
• Troubleshooting of an incident within IT Security incident response teams of SOC.
• Maintains awareness of new and emerging cyber-attack threats with potential to harm company systems and networks. Devises and implements countermeasures to mitigate potential security threats.
• Assists with the development and maintenance of IT security measurement and reporting systems to aid in monitoring effectiveness of IT Security programs.
• Assists with the development, revision, and maintenance of Standard Operating Procedures and Working Instructions related to IT Security.
• Good Coordination skills with various other teams for faster resolution/completion.
• Good to have threat hunting knowledge.

Education/Skills

• BE/B.Tech or equivalent with minimum 7-10 years of experience
• Work experience of minimum 6 years in SOC Incident Handling, Incident Response Trend Analysis, administration/monitoring of SIEM Tool like ArcSight, LogRhythm SIEM, Threat Intelligence, Malware Analysis,
• Ability to adapt and follow the processes and guidelines
• Possess an impeccable work ethic and a high degree of integrity
• Good Analytical & Problem Solving skills
• Able to communicate with technical staff/management
• Flexible to work after office and over weekend if required
• Highly motivated & customer centric