Security Operations Centre (SOC) Analyst

Shashwath Solution; Pune District; Presencial; INR 1.200.000 - 1.800.000; Tempo integral

Resumo da vaga

Shashwath Solution in Pune seeks an experienced SOC Analyst to join our Security Operations team. You will perform incident analysis, SIEM administration, and ELK Stack management across Windows and Linux environments, with a focus on reducing false positives and improving visibility.

You will tune rules, monitor alerts, and coordinate with IT to integrate new data sources, while documenting incidents and creating playbooks to strengthen security posture.

Qualificações

• Minimum 5+ years in SOC operations or a similar cybersecurity role.
• Proven experience in SIEM administration, incident analysis, and configuration fine-tuning.
• Hands-on experience with ELK Stack and beats agents.

Responsabilidades

• Incident Detection and Analysis: conduct deep-dive analyses and document root causes.
• SIEM Administration and Rule Fine-Tuning: tune rules to optimize alerting and reduce false positives.
• System and Network Security: monitor Windows and Linux systems and network infrastructures.
• ELK Stack and Beats Agent Management: manage Elasticsearch, Logstash, Kibana and beats troubleshooting.
• Security Policies and Compliance: document controls and support regulatory requirements.

Conhecimentos

SOC operations

Incident analysis

SIEM administration

Rule fine-tuning

Windows monitoring

Linux systems

ELK Stack

Beats agents

Formação

Bachelor's degree in Information Security

Bachelor's degree in Computer Science

Ferramentas

Splunk

QRadar

Elasticsearch

Logstash

Kibana

Beats

Descrição da vaga

Position Summary

We are seeking an experienced SOC Analyst to join our Security Operations team. This role demands an individual with a strong technical background in incident analysis, SIEM administration, and rule fine-tuning. The ideal candidate will have experience working with diverse environments, including Windows, Linux, and network security, and will be well-versed in ELK stack management and troubleshooting beats agents.

Key Responsibilities

• 1. Incident Detection and Analysis:
• o Conduct deep-dive analysis on security incidents, assessing root causes, and recommending solutions.
• o Proactively monitor and respond to security alerts, managing incident escalation and resolution processes.
• o Prepare detailed reports and document incidents to support future analysis and security measures.
• 2. SIEM Administration and Rule Fine-Tuning:
• o Oversee SIEM configurations, including tuning rules to optimize alerting and reduce false positives.
• o Conduct SIEM platform upgrades, troubleshoot performance issues, and ensure platform availability.
• o Collaborate with IT teams to integrate new data sources into SIEM and enhance visibility.
• 3. System and Network Security:
• o Perform continuous monitoring and analysis across Windows and Linux systems and network infrastructures.
• o Utilize tools for traffic analysis, anomaly detection, and threat identification.
• o Support configurations and policies within the IT and network environment to strengthen security.
• 4. ELK Stack and Beats Agent Management:
• o Manage and troubleshoot ELK Stack components (Elasticsearch, Logstash, and Kibana) to ensure seamless data flow.
• o Perform regular maintenance and troubleshooting of beats agents, ensuring reliable log ingestion and parsing.
• 5. Security Policies and Compliance:
• o Contribute to policy updates, ensuring adherence to organizational and industry compliance standards.
• o Document and enforce security controls aligned with best practices and regulatory requirements.

Skills and Qualifications

• Education: Bachelors degree in Information Security, Computer Science, or a related field.
• Experience:
• o Minimum of 5+ years in SOC operations or a similar cybersecurity role.
• o Proven experience in SIEM administration, incident analysis, and configuration fine-tuning.
• o Proficiency in monitoring and troubleshooting Windows and Linux systems and managing network security protocols.
• o Hands-on experience with the ELK Stack, with expertise in troubleshooting beats agents.

Technical Skills

• Familiarity with SIEM tools (e.g., Splunk, QRadar) and network protocols.
• Strong command of incident response processes, security frameworks, and best practices.
• Knowledge of communication protocols and system integrations for data protection.
• Certifications (preferred): CISSP, CompTIA Security+, CEH, or similar security certifications.

Competencies

• Strong analytical skills with attention to detail.
• Excellent verbal and written communication abilities.
• Ability to work independently and collaboratively in a fast-paced environment.

Additional Preferred Skills

• Knowledge of regulatory compliance standards.
• Experience in using EDR solutions.
• Ability to document processes and create incident playbooks.

This role offers an opportunity to work on advanced cybersecurity initiatives within a dynamic SOC environment, contributing to enhanced organizational security.