Security Operations Center Analyst

Bornsec; Bengaluru; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Bornsec Consulting LLP in Bengaluru seeks a Security Operations Center Analyst to monitor and analyze security incidents, conduct threat hunting, and provide threat intelligence. This full-time, on-site role requires collaboration with incident response, network operations, and IT teams to mitigate risks.

You will configure and use SIEM, IDS/IPS, EDR, and vulnerability scanners, stay current with threats, document incidents, and help promote a security-aware culture across the organization.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or related field.
• Minimum 2 years of SOC experience.
• Strong analytical and communication skills.

Responsibilities

• Monitor security events from SIEM, IDS, firewalls and logs; assess incidents.
• Investigate and respond to incidents promptly and effectively; coordinate with incident response teams.
• Stay updated on threats and attack techniques; develop countermeasures with threat intel teams.
• Continuously monitor for indicators of compromise; analyze logs and network data.
• Document incidents thoroughly with actions taken and lessons learned; prepare reports for management.
• Utilize SIEM, IDS/IPS, EDR and vulnerability tools; configure and optimize them.
• Follow incident response procedures; escalate when needed and communicate clearly.
• Contribute to security awareness and training initiatives across the organization.

Skills

CTH

CTI

Analytical Skills

Security Events Monitoring

Team Collaboration

Education

Bachelor's degree in Cybersecurity/IT

Tools

SIEM

EDR

Vulnerability Scanning

Job description

Bornsec Consulting LLP, based in Bangalore, India, is a dynamic and innovative firm with a passion for providing top-notch cybersecurity services and products to networks globally. We offer a range of services including Cyber Security Consulting, Cloud World, Professional Services, and Infosec Compliance Assessments. We partner with leading healthcare startups, real estate giants, cement manufacturers, and HR consulting companies, playing a crucial role in mitigating advanced cyber attacks and vulnerabilities. Leveraging cutting-edge security tools, technology expertise, and a solution engineering approach, we consistently deliver best-in-class services and unparalleled cost benefits to our customers.

Role Description

This is a full-time on-site role for a Security Operations Center Analyst located in Bengaluru. The Security Operations Center Analyst will be responsible for continuously monitoring and analyzing security incidents, cyber threat hunting, and providing cyber threat intelligence. The role involves responding to security incidents, conducting in-depth analysis, generating reports, and collaborating with other teams to mitigate risks and address vulnerabilities.

Monitor security events and alerts from various sources, including intrusion detection systems, firewalls, log files, and security information and event management (SIEM) tools. Analyze these events to identify potential security incidents and assess their severity.

2. Investigate and respond to security incidents promptly and effectively. This involves analyzing the nature of the incident, containing its impact, and implementing appropriate remediation measures. Coordinate with other teams, such as incident response, network operations, and system administrators, to ensure a coordinated response.

3. Stay up to date with the latest security threats, vulnerabilities, and attack techniques. Research and analyze emerging threats and develop countermeasures to proactively defend against them. Collaborate with threat intelligence teams and utilize external sources to enhance the organization's threat detection capabilities.

4. Continuously monitor security events and alerts to identify potential indicators of compromise. Conduct in-depth analysis of security logs, network traffic, and system data to uncover patterns or anomalies that may indicate an ongoing security breach or attack.

5. Document security incidents thoroughly, including the nature of the incident, the actions taken, and the lessons learned. Prepare incident reports for management and stakeholders, highlighting key findings, impact, and recommended improvements to security controls.

6. Utilize various security tools and technologies, such as SIEM platforms, intrusion detection and prevention systems, endpoint detection and response (EDR) solutions, and vulnerability scanning tools. Maintain and configure these tools to optimize their effectiveness in threat detection and incident response.

7. Follow established incident response procedures and protocols. Escalate incidents to appropriate teams or management when necessary, ensuring timely resolution and effective communication.

8. Contribute to the organization's security awareness and training initiatives by sharing knowledge, best practices, and conducting training sessions for employees. Help promote a security-conscious culture throughout the organization.

Qualifications

• Proficiency in Cyber Threat Hunting (CTH) and Cyber Threat Intelligence (CTI)
• Strong Analytical Skills
• Minimum 2 Years of Experience with working in a Security Operations Center
• Comprehensive knowledge of Cybersecurity principles and practices
• Excellent problem-solving and communication skills
• Ability to work independently and as part of a team
• Bachelor's degree in Cybersecurity, Information Technology, or related field