Senior Security Analyst

Eventus Security; Navi Mumbai; On-site; INR 800,000 - 1,400,000; Full time

Job summary

Eventus Security is seeking an L2 SoC Analyst to detect, investigate, and remediate security incidents. You will work in a 24/7 SOC with multiple shifts and ensure smooth workflow handoffs.

The ideal candidate has 3+ years in cyber security and 2+ years in L2 SOC investigations, with strong written and spoken skills. Experience with global customers (US/Canada) is a plus, and expertise in EDR/XDR, SIEM, and incident response is required.

Qualifications

• BE/Tech degree or higher with relevant security certs.
• 3+ years in cyber security with SOC experience, 2+ years in L2 SOC investigations.
• Experience with global customers (US/Canada) is a plus.
• Strong knowledge of EDR/XDR and SIEM concepts.
• Hands-on with incident response playbooks and procedures.

Responsibilities

• Detect, investigate, and remediate security incidents in a 24x7 SOC.
• Create, review, and deliver incident response playbooks and procedures.
• Analyze security logs from diverse devices; identify trends and threats.
• Maintain familiarity with security tools: EDR, XDR, SIEM, and NDR/EPP.
• Coordinate with global customers and internal teams for remediation.
• Develop and tune SIEM rules and playbooks; support threat hunting.
• Document findings and emerging trends; assist in forensics if needed.

Skills

L2 SOC experience

Global customer handling

Threat hunting

Incident response

Strong communication

Education

BE/B.Tech/M.Tech/MSc/MCA or equivalent

Certifications: GCFA/GCFE/CISP/CISSP/CCNP/CCIE Security/CEH/CSA

Tools

EDR

XDR

SIEM

Remedy/ServiceNow

Firewall/Web Security/UEBA

Job description

Looking for a Strong L2 SoC Analyst. With exceptional knowledge to detect, investigate, and remediate security incidents. Given the complex responsibility involved in such roles we are looking for someone who understands the importance to the customer’s first mindset and that SOC is 24/7 and multiple shifts and managing the workflow handoff seamlessly and prudently is a must.

Qualifications

• BE/ B.Tech/ M.Tech/ MSc/ MCA qualification or equivalent
• At least one of the following certifications - GCFA, GCFE, CISP, CISSP, CCNP, CCIE Security, CEH, CSA.

Experience

• Should have minimum of 3 years of experience in Cyber security, SOC
• At least 2 years of working in the SOC as L2 in an investigative position.
• Strong oral and written skills are a must.
• Experience in managing global customers specially in US and Canada is an advantage.
• Proficient in Incident Management and Response.
• In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc. (Strong knowledge of EDR and XDR is an advantage)
• Strong understanding of Security solutions like EDR, XDR, NDR, EPP, Web Security, Firewalls, Email Security, O365, SIEM, SSL, Packet Analysis, HIPS/NIPS, Network Monitoring tools, Remedy, Service Now Ticketing Toolset Web Security, AV, UBEA, Advanced SOC etc.
• Responsible for working in a 24x7 Security Operation centre (SOC) environment.
• Should have hands-on experience to create, perform, review, and deliver Incident Response playbooks and procedures.
• Provide analysis and trending of security log data from a large number of heterogeneous security devices
• Experience in threat and vulnerability analysis as well as security advisory services.
• Experience with Security Information Event Management (SIEM) tools, creating advanced co-relation rules, and Vulnerability Assessments (hands-on experience is a must)
• Must have experience in threat hunting.
• Experience in forensic investigations is an advantage
• Investigate, document, and report on information security issues and emerging trends.
• Other tasks and responsibilities as assigned
• Experience with creating and fine tuning of Rules, and Playbook etc.
• Knowledge of various operating system flavours including but not limited to Windows, Linux, Unix
• Knowledge of TCP/IP Protocols, network analysis, and network/security applications.
• Knowledge of common Internet protocols and applications
• Communicate effectively by contributing significantly to the development and delivery of a variety of written and visual documents for diverse audiences.

Please note: Designation will be finalized based on the interview evaluation