Senior Analyst - SOC

SHI; Hyderabad; Hybrid; INR 900,000 - 1,300,000; Full time

Job summary

SHI in Hyderabad is seeking a Technology Specialist SOC (L2) with 5+ years of experience to join our on-site security operations team. You will conduct incident analysis, malware research, and uphold SOC processes in a fast-paced environment.

The role requires hands-on SIEM work (LogRhythm, QRadar, Splunk) and strong knowledge of security tools, Windows AD and Linux systems, and industry frameworks. 24x7 availability and collaboration within the team are essential for protecting our clients.

Qualifications

• Hands-on incident analysis and malware research experience.
• Experience with SIEM tools such as LogRhythm, QRadar or Splunk.
• Understanding of IDS/IPS, proxies, DLP, CASB, DNS security, firewalls.
• Knowledge of NIST and MITRE ATT&CK frameworks.
• Experience with Windows AD and Unix/Linux systems.
• Ability to analyze logs and network data from multiple systems.
• Familiar with reverse engineering concepts and malware basics.
• Strong teamwork, multitasking and 24x7 flexibility.
• Experience in email threat analysis and remediation.

Responsibilities

• Analyze and respond to security incidents; malware research.
• Operate and optimize SIEM solutions across platforms.
• Monitor and triage security alerts across tools and cloud environments.
• Review email headers and attachments to identify threats.
• Collaborate with team in a fast-paced 24x7 SOC setting.
• Maintain logs, network data, and incident documentation.

Skills

Incident analysis

Malware research

SOC operations

SIEM tools

Security tools

Cloud security alerts

NIST & MITRE ATT&CK

Windows AD

Unix/Linux

Log/packet analysis

Reverse engineering basics

Network protocols

Teamwork & multitasking

24x7 shift

Email threat analysis

Tools

LogRhythm

Qradar

Splunk

Job description

Technology Specialist SOC

Level: L2

Exp: 5+years

Work Location – Hyderabad

Roles and Responsibilities:

• Hands on experience of incident analysis malware research, SOC, or any other similar security incident response experience.
• Hands on Experience with any SIEM Solution (LogRhythm, Qradar, Splunk, etc)
• Fundamental understanding of security tools such as IDS/IPS, web proxies, DLP, CASB, DNS security, DDoS protection, firewalls, and cloud alerts/events
• Knowledge of NIST and MITRE ATT&CK security frameworks
• Knowledge of Microsoft Windows systems including active directory and Unix/Linux systems
• Experience analyzing and inspecting log files, network packets, and any other security tool information output from multiple system types
• Familiar with basic reverse engineering principles and understand of malware, rootkits, TCP/UDP packets, network protocols
• Team-oriented and skilled in working within a collaborative environment
• Ability to effectively multi-task, prioritize and execute tasks in a high-pressure environment
• Required flexibility to work in a 24x7 environment.
• Experience with technical analysis of email headers, links, and attachments to determine if an email is malicious, and then executing remediation techniques to protect the environment.