Senior SOC Analyst

DMart; Thane; On-site; INR 900,000 - 1,300,000; Full time

Job summary

DMart is seeking a Security Operations expert to manage MDR solutions, SIEM/SOAR playbooks, and threat hunting. You will coordinate with vendors and internal teams to ensure secure operations and rapid incident response.

The role requires mandatory experience in SIEM/SOAR tools, incident handling, and threat hunting, with a focus on implementing robust security controls across infrastructure.

Qualifications

• Experience with MDR tooling, infrastructure and process development.
• Experience with popular SIEM, SOAR and threat hunting platforms is mandatory.
• Experience in security incident handling is mandatory.
• Exposure to threat hunting is mandatory.

Responsibilities

• Operate MDR solutions and related software and applications.
• Develop use cases and playbooks for SIEM and SOAR for automated incident detection and handling.
• Test SIEM/SOAR and other scope solutions; provide performance statistics and reports.
• Integrate tools and services for access, authentication, authorization, data security, vulnerability management, policy adherence and auditing.
• Ensure effectiveness of security solutions and identify gaps in controls to protect assets.
• Coordinate with vendors, partners and internal teams for deployments, maintenance and operations.
• Manage cybersecurity incidents and related processes; work with partners for effective operations.
• Conduct periodic threat hunting and report on findings to ensure detection of threats.

Skills

SOC operations

Threat hunting

MDR tooling

Incident handling

SIEM & SOAR

Communication

Training others

Education

Security certifications (CEH, CSA, CIH, CompTIA Security+)

Tools

SIEM

SOAR

Threat hunting platforms

Job description

Role & responsibilities

1. Handling operation of MDR solution, including software and applications.
2. Develop use cases and playbooks for SIEM and SOAR for effective and automated incident detection and handling.
3. Test SIEM SOAR and other solutions in scope to explore the right technical defense/remedy and provide performance statistics and reports.
4. Perform integration of all tools and services for access, authentication, authorization, data security, vulnerability management, policy management, auditing, and compliance to ensure companys security policy and procedures are applied.
5. Ensure effectiveness of security solutions in scope
6. Assess and Find the gaps in security controls which protects critical assets against any incidents or threats from the internal or external environment.
7. Co-ordinate with vendors/partners & internal teams to manage security platforms including deployments, maintenance and operations. Develop plans for maintaining the infrastructure in newly implemented security solutions to the operational environment.
8. Manage Cybersecurity incidents and related process, tools and resources
9. Work with an identified Partner for effective Security operations and incident handling.
10. Conduct periodic threat hunting independently and with partners to ensure effective detection of any threats.
11. Ensure preventive maintenance of critical infrastructure, to increase performance and minimize disruption.
12. Record all the security incidents/events leading to infrastructure downtime, analyze root cause and suggest workarounds.
13. Create Reports for performance reviews, corrective action, routine equipment checks and preventative maintenance for security systems to reduce the down time of the systems.
14. Gather and report on metrics regarding security systems within ASL environments. Prepare status reports and other management metrics as needed.

Preferred candidate profile

1. Demonstrable experience within a Security Operations Center, coordinating responses to security incidents.
2. Experience in working with MDR tooling, infrastructure and Develop processes.
3. Experience On popular SIEM, SOAR, and threat hunting platforms is mandatory.
4. Experience in security incident handling is mandatory.
5. Exposure to threat hunting is mandatory.
6. Security related professional certifications preferred. Examples of certifications include but are not limited to CEH , CSA, CIH (ec council), CompTIA Security+, CND, infosec institute, etc.
7. Good analytical & problem-solving skills with ability to translate ideas into practical implementation.
8. Ability to manage stakeholder relationships including team members, vendors and partners.
9. Good communication skills with both technical and non-technical audiences.
10. Ability to provide technical training to other team members.