SOC Analyst

Resillion; Bengaluru; Hybrid; INR 600,000 - 900,000; Full time

Job summary

Resillion is looking for a SOC Analyst based in Bengaluru to analyze security incidents, monitor threats, and recommend solutions. The ideal candidate will have 1-3 years of experience, strong SIEM knowledge (Microsoft Sentinel), and solid networking principles.

Responsibilities include investigating security incidents, improving response processes, and providing detailed documentation. Candidates should be comfortable working in a hybrid or remote environment.

Qualifications

• 1-3 years of experience in security monitoring.
• Experience with SIEM tuning and monitoring rule creation.
• Familiar with incident management and response processes.

Responsibilities

• Analyse security incidents to identify root causes.
• Investigate and document security issues.
• Conduct threat intelligence analysis to identify emerging threats.
• Evaluate security of infrastructure systems and recommend solutions.
• Improve incident response processes and maintain documentation.

Skills

Security monitoring experience with SIEM technologies (Microsoft Sentinel)

Tuning of SIEM environment

Strong understanding of networking principles

Strong understanding of Windows, Linux, and cloud technologies

Understanding of security solutions (SIEMs, VPNs, etc.)

Good understanding of security incident management processes

Attention to detail

MSSP experience

Strong communication skills

Comfortable working in rotational shifts

Tools

Microsoft Sentinel

Microsoft Kusto Query Language (KQL)

Crowdstrike Falcon

Job description

Overview

Title: SOC Analyst

Experience Range: 1-3 Years

Location: Bangalore (Hybrid/Remote)

Key Responsibilities

• Analyse security incidents to identify the root cause.
• Investigate, document, and report on information security issues and emerging trends.
• Analyse Threat Intelligence sources for proactive identification of emerging threats.
• Participate in evaluating the security of monitored infrastructure systems and take part in recommending additional security solutions where appropriate.
• Participate in improving internal incident response processes.
• Assist with the creation and maintenance of Playbooks and Runbooks.
• Recommend enhancements to SOC security process, procedures, and policies.
• Provide vulnerability management and monitoring service to customers through vulnerability scanning tools.
• Integrate and share information with other analysts and other teams.
• Assist with reporting and documentation work as needed.

Required Skills And Qualifications

• Security monitoring experience with one or more SIEM technologies which is Microsoft Sentinel
• Tuning of SIEM environment and creation of additional monitoring rules
• Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols
• Strong understanding of Windows, Linux and cloud technologies
• Good understanding of security solutions including SIEMs, Web Proxies, Anti-Virus, Firewalls, VPN, authentication providers and mechanisms, encryption, IPS/IDS
• Good understanding of security incident management, malware management and vulnerability management processes
• Attention to detail and quality
• Should have MSSP Experience along with strong communication skills
• Comfortable to work in Rotational shifts

Desirable Skills And Qualifications

• AZ-500 Microsoft Azure Security Technologies and/or SC-200 Microsoft Security Operations Analyst
• Knowledge of Microsoft Kusto Query Language (KQL)
• Knowledge of Crowdstrike Falcon
• Prior experience with handling or managing Cyber Incident Response (NIST)
• Familiarity with ITIL practices regarding incident, problem and change management