SOC

Esds Software Solutions; Ahmednagar; On-site; INR 600,000 - 1,000,000; Full time

Job summary

Esds Software Solutions seeks a skilled SOC Analyst in Ahmednagar, Maharashtra with around 3 years of SOC experience to monitor security events, investigate incidents and support incident response for strengthening security posture.

The role involves using SIEM tools like Splunk, IBM QRadar or Microsoft Sentinel, analyzing logs from network devices, servers and endpoints, and coordinating with the client location team for timely containment and reporting.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or related field.
• 3 years of hands-on SOC experience.
• Experience with SIEM tools (Splunk, QRadar, Sentinel).
• Willingness to work from client location in Ahmednagar.

Responsibilities

• Monitor security alerts and events through SIEM tools and identify potential threats.
• Perform security event analysis, incident investigation and initial threat assessment.
• Investigate security incidents and assist in incident response activities.
• Analyze logs from firewalls, servers, endpoints, OS and network devices.
• Monitor and investigate alerts using SIEM platforms (Splunk, QRadar, Sentinel).
• Support incident response, threat detection and remediation activities.
• Work with EDR/XDR tools to investigate endpoint-related security incidents.
• Identify IOCs and analyze potential threats.
• Maintain incident documentation and SOC records.

Skills

SOC operations

Splunk

IBM QRadar

Microsoft Sentinel

Log analysis

EDR/XDR

MITRE ATT&CK

Threat intelligence

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

CrowdStrike

SentinelOne

Microsoft Defender

Job description

Experience: 3 Years
Location: Ahmednagar, Maharashtra
Work Mode: Work from Client Location
Department: Information Security / Cyber Security

Job Summary

We are looking for a skilled SOC Analyst with approximately 3 years of experience in Security Operations Centre (SOC) operations. The candidate will be responsible for monitoring security events, identifying potential threats, investigating security incidents and supporting incident response activities to maintain the organization's security posture.

Key Responsibilities

• Monitor security alerts and events through SIEM tools and identify potential security threats.
• Perform security event analysis, incident investigation and initial threat assessment.
• Work on security incidents, investigate suspicious activities and elevate critical incidents.
• Analyse logs from firewalls, servers, endpoints, operating systems and network devices.
• Monitor and investigate alerts using SIEM platforms such as Splunk, IBM QRadar or Microsoft Sentinel.
• Support incident response, threat detection and remediation activities.
• Work with EDR/XDR tools to investigate endpoint-related security incidents.
• Identify Indicators of Compromise (IOCs) and analyse potential security threats.
• Maintain incident documentation, investigation reports and SOC operational records.
• Follow established security policies, procedures and escalation matrices.

Required Technical Skills

• Around 3 years of hands-on experience in SOC operations.
• Good knowledge of SIEM tools Splunk, IBM QRadar or Microsoft Sentinel.
• Understanding of SOC monitoring, incident detection and incident response.
• Knowledge of networking concepts TCP/IP, DNS, VPN, Firewalls, IDS/IPS.
• Experience in log monitoring and analysis.
• Familiarity with EDR/XDR solutions such as CrowdStrike, SentinelOne or Microsoft Defender.
• Understanding of cybersecurity threats, vulnerabilities and attack techniques.
• Knowledge of MITRE ATT&CK framework and threat intelligence is preferred.

Candidate Requirements

• Bachelor's degree in Computer Science, IT, Cybersecurity or a related field.
• Strong analytical and troubleshooting skills.
• Good communication and incident reporting skills.
• Willingness to work from the client location in Ahmednagar.
• Flexibility to work in rotational shifts, if required.