SIEM & Incident Response Analyst

TechDefence Labs; Mumbai; On-site; INR 1,000,000 - 1,800,000; Full time

Job summary

TechDefence Labs in Mumbai is seeking a SIEM & Incident Response professional to handle security tickets, monitor incidents, and collaborate with the SIEM team to ensure effective detection and resolution of threats. The role requires hands-on incident management in a 24x7 SOC, strong log analysis skills, and clear communication to coordinate with internal teams for remediation and accurate reporting.

Experience with SIEM concepts, alert investigation, and incident correlation is essential,

Qualifications

• Minimum 2+ years in SIEM, SOC, Incident Response, or Security Operations.
• Hands-on security ticket handling and incident management experience.
• Experience in 24x7 SOC/SIEM environments and log analysis.
• Good communication and analytical skills.

Responsibilities

• Handle and investigate security tickets in a 24x7 environment.
• Monitor, analyze, and respond to security incidents and alerts.
• Work closely with the SIEM team for alert investigation and incident correlation.
• Perform initial triage, escalation, and follow-up of security incidents.
• Analyze logs and identify suspicious activities and potential threats.
• Coordinate with internal teams for incident resolution and remediation.
• Maintain accurate incident records, reports, and documentation.
• Follow defined Incident Response and SOC processes and SLAs.

Skills

SIEM

SOC

Incident Response

Log Analysis

Job description

We are looking for a SIEM & Incident Response professional to handle security tickets, monitor and respond to incidents, and work closely with the SIEM team to ensure effective detection and resolution of security threats.

Key Responsibilities:

• Handle and investigate security tickets in a 24x7 environment.
• Monitor, analyze, and respond to security incidents and alerts.
• Work closely with the SIEM team for alert investigation and incident correlation.
• Perform initial triage, escalation, and follow-up of security incidents.
• Analyze logs and identify suspicious activities and potential threats.
• Coordinate with internal teams for incident resolution and remediation.
• Maintain accurate incident records, reports, and documentation.
• Follow defined Incident Response and SOC processes and SLAs.

Required Skills:

• 2+ years of experience in SIEM, SOC, Incident Response, or Security Operations.
• Hands-on experience in security ticket handling and incident management.
• Good understanding of SIEM concepts, log analysis, and security alerts.
• Knowledge of Incident Response, threat detection, and investigation.
• Experience working in a 24x7 SOC/SIEM environment.
• Good communication and analytical skills.