Security Operations Center Analyst

Soffit Infrastructure Services (P) Ltd; Ernakulam; On-site; INR 450,000 - 800,000; Full time

Job summary

Soffit Infrastructure Services (P) Ltd in Kerala seeks a Security Operations Centre (SOC) Information Security Analyst to join a 24x7 team, monitor security events from SIEM, tickets, and communications, and respond to incidents for client environments both online and on-premises.

The role emphasizes strong event analysis, vulnerability awareness, collaboration with Tier 3 specialists, and documentation of incidents and processes, with opportunities to lead a SOC team and contribute to threat

Qualifications

• 3 years of experience in SIEM.
• CEH & CompTIA Security+, N+, A+ Certification (Optional).
• Excellent event or log analytical skills.
• Proven experience as IT Security Monitoring or similar role.
• Exceptional organizing and time management skills.
• Very good communication abilities.

Responsibilities

• Tier 2 SOC analysts respond to incidents escalated from Tier 1 and assess attack scope.
• Review vulnerability assessments and perform deep-dive data analyses.
• Monitor security events via SIEM, tickets, email, and phone; escalate as needed.
• Act as a team lead to guide SOC analysts and protect data.
• Identify root causes of events and incidents.
• Keep SIEM up to date and contribute to threat strategies.
• Stay updated on emerging threats and regulatory requirements.
• Document incidents and maintain customer build documents and procedures.
• Prepare and review weekly and monthly reports for accuracy.
• Contribute to use cases and threat hunting initiatives.
• Handle additional duties from security management or service delivery.

Skills

SIEM experience

CEH & Security+

N+ Certification

A+ Certification

Event analysis

IT security monitoring

Time management

Communication skills

Job description

The Security Operation Centre (SOC) Information Security Analyst are the first level responsible for ensuring the protection of digital assets from unauthorized access, identify security incidents and report to customers for both online and on-premises. The position monitors and responds to security events from managed customer security systems as part of a team on a rotating 24 x 7 x 365 basis. They are alert and aggressive to filter out suspicious activity and mitigate risks before any incident occur. Your background should include exposure to security technologies including firewalls, IPS/IDS, logging, monitoring and vulnerability management. You should understand network security practices. Excellent customer service while solving problems should be a top priority for you.

Main Responsibilities

• Tier 2 SOC analysts are incident responders, remediating serious attacks escalated from Tier 1, assessing the scope of the attack, and affected systems, and collecting data for further analysis.
• Work proactively to seek out weaknesses and stealthy attackers, review vulnerability assessments (CVEs) on monitored assets. Focus more on doing deep dives into datasets to understand what's happening during and after attacks.
• Monitor security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity and suspicious activities, elevate to managed service support teams, tier 3 information security specialists, and/or customer as appropriate to perform further investigation and resolution.
• Works as a Team lead for the SOC Analysts helping them to ensure that corporate data and technology platform components are safeguarding from known threats.
• Analyse the Events & incidents and identify the root cause.
• Assist in keeping the SIEM platform up to date and contribute to security strategies as an when new threats emerge.
• Staying up to date with emerging security threats including applicable regulatory security requirements.
• Bring enhancements to SOC security process, procedures, and policies.
• Document and maintain customer build documents, security procedures and processes.
• Document incidents to contribute to incident response and disaster recovery plans.
• Review critical incident reports and scheduled weekly & monthly reports and make sure they are technically and grammatically accurate.
• Keep updated with new threats, vulnerabilities, create/contribute to use cases, threat hunting etc.
• Other responsibilities and additional duties as assigned by the security management team or service delivery manager

Skills:

• 3 years of experience in SIEM.
• CEH & CompTIA Security+, N+, A+ Certification (Optional)
• Excellent event or log analytical skills
• Proven experience as IT Security Monitoring or similar role
• Exceptional organizing and time management skills
• Very good communication abilities