Security Operator

Fujitsu; Pune District, Chennai District, Bengaluru; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Fujitsu in Pune, India seeks a cybersecurity professional with 5+ years of SOC L2 experience across infrastructure protection, network and endpoint security, and DLP. The role emphasizes deep incident analysis using SIEM, incident investigation, and correlation.

Responsibilities include threat hunting, MITRE ATT&CK based analysis, vulnerability assessment, SIEM tuning, and management reporting. Azure/cloud exposure is a plus; willingness to work in a 24x7 SOC environment is required.

Qualifications

• 5+ years of Cybersecurity/SOC L2 experience across infrastructure protection, network security, endpoint protection, and DLP.
• Hands-on experience with SIEM platforms, security event correlation, incident investigation and troubleshooting.
• Experience with EPP, EDR, Proxy, Email Security, IPS, and Firewall technologies.
• Nice to have: Azure or other cloud security exposure.

Responsibilities

• Perform deep analysis and investigation of security incidents using correlation techniques; CSIRT-level analysis.
• Conduct threat hunting and identify suspicious or malicious activities within the environment.
• Analyze threats and attack patterns using the MITRE ATT&CK framework.
• Identify and assess current global threats, zero-day vulnerabilities and targeted attacks.
• Perform vulnerability assessments and recommend mitigation measures.
• Investigate increases in threat logs and alarms to identify root causes and impact.
• Analyze false-positive alerts and tune SIEM rules to improve detection.
• Prepare security reports and present findings, risks, and recommendations to management.

Skills

SOC Operations

SIEM

Threat Hunting

MITRE ATT&CK

Vulnerability Assessment

EPP/EDR

Proxy & Email Security

IPS/Firewall

XSOAR

Azure/Cloud Security

Tools

XSOAR

Job description

5+ years of relevant Cybersecurity/SOC L2 experience, preferably across infrastructure protection, network security, endpoint protection, and DLP. Strong hands-on experience with SIEM platforms, security event correlation, incident investigation, and troubleshooting.Experience with EPP, EDR, Proxy, Email Security, IPS, and Firewall technologies.Experience with XSOAR is preferred.Experience with Azure or other cloud platforms is an added advantage.

Key Responsibilities -

Perform deep analysis and investigation of security incidents using correlation techniques, similar to CSIRT-level analysis.Conduct threat hunting and identify suspicious or malicious activities within the environment.Analyze threats and attack patterns using the MITRE ATTCK framework.Identify and assess current global threats, zero-day vulnerabilities, and targeted attacks that may affect the environment.Perform vulnerability assessments and recommend appropriate mitigation measures.Investigate increases in security threat logs and alarms to identify root causes and potential impact.Analyze false-positive alerts and perform SIEM rule tuning to improve detection accuracy.Recommend security best practices and appropriate remediation or mitigation plans.Prepare clear security reports and present findings, risks, and recommendations to management.

Core Skills -

Enterprise Cybersecurity / SOC OperationsSIEM and Security Event CorrelationIncident Analysis and ResponseThreat HuntingMITRE ATTCKVulnerability Assessment and MitigationEPP / EDRProxy and Email SecurityIPS / Firewall / Network SecurityXSOAR preferredAzure / Cloud Security exposure preferred

Additional Requirements -

Excellent troubleshooting and complex problem-solving skills.Self-motivated, results-driven, organized, and capable of handling multiple tasks simultaneously.Strong written and verbal communication skills.Willingness to work in a 24x7 SOC environment and from the designated SOC location.