Security Operations Engineer(SOC)

Oracle; Bengaluru; Ibrido; INR 600.000 - 1.000.000; Tempo pieno

Descrizione del lavoro

Oracle in Bengaluru, India is seeking a curious Security Analyst to join our Integrated Security Operations Center. You will monitor, investigate, and respond to security alerts across our technology environment, performing 24x7 alert triage to distinguish suspicious activity from routine events.

You will contribute to incident response, threat intelligence, and detection engineering as your skills grow, and collaborate with security, IT, and business teams to strengthen defenses and drive

Competenze

• Foundational knowledge of security operations, common attack techniques, and incident investigation.
• Familiarity with Windows, Linux, networking, authentication, and enterprise or cloud services.
• Experience with—or practical exposure to—security alerts, logs, and tools such as SIEM or EDR.
• Strong analytical judgment and the ability to follow procedures while knowing when to escape.
• Clear written and verbal communication skills, including strong documentation and cross-shift collaboration.
• Willingness to work scheduled shifts, including nights, weekends, and public holidays.
• Typically 1–4 years of relevant experience in security operations, incident response, IT operations, or a related field. Strong internships, labs, projects, or equivalent practical experience are also welcome.
• A degree in cybersecurity, computer science, or a related field—or equivalent practical experience.

Mansioni

• Security monitoring, triage, and response across SIEM, EDR, identity, email, network, and cloud security platforms.
• Correlate logs and evidence to assess alert validity, severity, scope, and business impact.
• Follow response playbooks; perform authorized containment and remediation; escal…
• Maintain clear investigation records, document decisions, and provide thorough shift handoffs.
• Partner with security, IT, and business teams to resolve issues and strengthen response quality.
• Incident response and improvement: Support incident response through evidence collection, timeline development, scoping, containment, and recovery.

Conoscenze

Security operations

SIEM

EDR

Windows

Linux

Networking

Cloud services

Incident investigation

Communication

Formazione

Bachelor's degree in cybersecurity or computer science

Strumenti

SIEM

EDR

Descrizione del lavoro

Security Analyst Integrated Security Operations Center

Location: Bengaluru, India
Experience: Junior to mid-level
Schedule: Rotating shifts supporting 24x7 operations

About the role

We are seeking a curious, detail-oriented Security Analyst to join our new Integrated Security Operations Center (ISOC) in Bengaluru.

You will monitor, investigate, and respond to security alerts across our technology environment. Your core responsibility is 24x7 alert triage: separating suspicious activity from routine events, assessing impact, and taking timely, authorized action.

As operational needs and your skills evolve, you will also contribute to incident response, detection engineering, threat intelligence, and security improvement projects.

What youll do

Security monitoring, triage, and response

• Monitor and investigate alerts from SIEM, EDR, identity, email, network, and cloud security platforms.
• Correlate logs and evidence to assess alert validity, severity, scope, and business impact.
• Follow response playbooks; perform authorized containment and remediation; escal…
• Maintain clear investigation records, document decisions, and provide thorough shift handoffs.
• Partner with security, IT, and business teams to resolve issues and strengthen response quality.

Incident response and improvement

• Support incident response through evidence collection, timeline development, scoping, containment, and recovery.
• Contribute to post-incident reviews and improvements to playbooks, procedures, and operational knowledge.
• Identify recurring alert patterns, workflow gaps, and automation opportunities.

Detection engineering and threat intelligence

• Help develop, test, tune, and document detection rules to improve coverage and reduce false positives.
• Review relevant threat intelligence and apply it to investigations and detection improvements.
• Support indicator validation and guided threat-hunting activities.

Special projects

• Contribute to projects such as onboarding security data sources, evaluating tools, improving reporting, and building lightweight automation.
• Take on additional security operations responsibilities aligned with business needs and development goals while maintaining operational coverage.

What youll bring

• Foundational knowledge of security operations, common attack techniques, and incident investigation.
• Familiarity with Windows, Linux, networking, authentication, and enterprise or cloud services.
• Experience with—or practical exposure to—security alerts, logs, and tools such as SIEM or EDR.
• Strong analytical judgment and the ability to follow procedures while knowing when to escape.
• Clear written and verbal communication skills, including strong documentation and cross-shift collaboration.
• Willingness to work scheduled shifts, including nights, weekends, and public holidays.
• Typically 1–4 years of relevant experience in security operations, incident response, IT operations, or a related field. Strong internships, labs, projects, or equivalent practical experience are also welcome.
• A degree in cybersecurity, computer science, or a related field—or equivalent practical experience.

Nice to have

• Experience investigating phishing, malware, suspicious authentication, endpoint, or cloud security events.
• Familiarity with MITRE ATT&CK and threat-informed investigations.
• Basic scripting or query skills in Python, PowerShell, SQL, KQL, or SPL.
• Exposure to SOAR platforms, detection development, or incident response exercises.
• Certifications such as Security+, CySA+, or security-platform certifications. Helpful, but not required.

How you’ll grow

You will help shape a new security operations center while building hands‑on investigative experience. Over time, you can take greater ownership of investigations and contribute more deeply to incident response, detection engineering, threat intelligence, and security improvement initiatives.