Security Operations (SecOps) Engineer

ECLAT Health Solutions; Hyderabad; On-site; INR 800,000 - 1,500,000; Full time

Job summary

Eclat-Health-Solutions-4 is seeking a Security Operations professional in Hyderabad, India. You will manage security detection rules and collaborate with various teams on incident response. A solid understanding of SIEM platforms and security tools is essential for this role.

The successful candidate will hold a Bachelor’s degree in Computer Science and have over 2 years of experience in the field. Responsibilities include threat hunting and compliance efforts in a dynamic environment.

Qualifications

• Minimum 2 years of experience in security operations.
• Security certifications like CEH are advantageous.

Responsibilities

• Manage security detection rules in SIEM tools.
• Collaborate on incident response and documentation.
• Perform proactive threat hunting using security alerts.

Skills

Knowledge of SIEM platforms

Security analysis

Threat hunting

Cloud security

Linux and Windows OS

Penetration testing

Education

Bachelor’s degree in Computer Science or equivalent

Tools

Rapid7 Insight IDR

Splunk

Securonix

Security tools (EDR, MDM, ITSM)

Job description

Responsibilities

• Should have good knowledge and hands on experience in SIEM platforms such as Rapid7 Insight IDR, Splunk, Securonix, etc.,
• Manages security detection rules and event sources in SIEM tool.
• Works with SOC team for SOAR orchestrator deployment and develop workbook for automation.
• Performs security analysis using security tools like EDR, MDM and ITSM tools.
• Works with IT team and Cloud team for troubleshooting EDR issues, detection mechanism, policy segregation, version updates, etc.,
• Creates incident response playbooks and executes incident response plans documenting security incidents.
• Performs proactive threat hunting by analysing the security alerts trends and keeping up to date with current threats via external sources.
• Be able to work with AWS cloud environments and undertake WAF configurations, Security hardening, Log Analysis, etc.,
• Manages Vulnerability assessment tools and execute scan templates, reporting templates, authentication record, policy compliance scans, etc.,
• Be able to perform and analyse application security SAST and DAST reports.
• Able to perform penetration testing of network, web applications, APIs and provide detailed report.
• Assists in Email analysis and have good knowledge on email security tools and configurations.
• Should have good knowledge on Linux, Windows operating systems and perform data validation, forensic analysis.
• Be able to audit and fine tune Firewall rules from security point of view
• Manages DLP rules, policies and alerts.
• Supports audit and compliance efforts for HITRUST, SOC2 Type2, HIPAA, ISO 27001
• Collaborates with IT, Cloud Ops, Operations and Application development team for implementation of security controls.
• Be able to use AI tools to maximize the security operations outcome and automation.
• Possess knowledge of AI security

Qualifications

• Bachelor’s degree and above in Computer Science or equivalent.
• 2 years + experience in security operations field
• Security certifications like CEH is good to have.