SOC Analyst

Halma plc; Bengaluru; On-site; INR 600,000 - 1,000,000; Full time

Job summary

Halma plc is seeking skilled cyber security professionals for its 24/7 security operations team in Bengaluru. You will provide real-time monitoring, incident response, and support for Halma group infrastructure and subsidiary companies.

The role requires hands-on experience with Microsoft Defender for Endpoint, Azure Sentinel, and Intune, along with a strong security mindset and ability to work with cross-functional IT teams.

Qualifications

• Bachelor’s in computer science/IT
• CompTIA Security+, CEH or equivalent security certifications preferred
• Microsoft Security certifications (SC-200/SC-300/SC-400) beneficial
• SIEM and network security certifications are desirable

Responsibilities

• Perform real-time security monitoring and incident response across Halma’s networks and infrastructure.
• Create and maintain incident response playbooks and runbooks.
• Lead post-incident reviews to tune and improve detection and response.
• Collaborate with MSSP and IT teams to investigate alerts and escalations.
• Support Azure Active Directory, Intune, conditional access and MFA configurations; monitor Defender and Office 365 security.
• Document security incidents and maintain KB articles and SOPs for SOC processes.

Skills

Cyber security

Incident response

Log analysis

SOC operations

Threat detection

Education

Bachelor's in computer science/IT

Tools

Microsoft Defender for Endpoint

Azure Sentinel

Intune

Office 365 security

KQL

Job description

Halma is a global group of life-saving technology companies, driven by a clear purpose. We are an FTSE 100 company with headquarters in the UK and operations in 23 countries, including regional hubs in India, China, Brazil, and the US.

Our diverse group of nearly 50 global companies specialise in market leading technologies that push the boundaries of science and technology.

For the last 42 years, the combination of our purpose, strategy, people, DNA and sustainable business model has resulted in record long-term growth in revenues and profits and an increase in dividend by ≥ 5% every year– an achievement unrivalled by any company listed on the London Stock Exchange.

We are a Great Place to Work® certified organisation, with an employee centric culture anchored on autonomy, trust, respect, humility, work-life balance, team spirit, and approachable leadership.

We offer a safe and respectful workplace, where everyone can be who they ‘REALLY’ are, feel free to bring their whole selves to work and use their unique talents, knowledge, expertise, experiences, and backgrounds to create meaningful outcomes.

We nurture entrepreneurial spirits and empower them to think beyond the possibilities, to discover, shape and build their own unique stories. We promote and support non-linear career growth for the right talent.

We are simple, humble and approachable, and we believe in leadership at all levels to bring our purpose to life. Everyone at Halma India makes an impact, and so do you when you join us!

Position Objective:

• We are seeking passionate cyber security professionals for our 24/7 security operations team, who will provide support to Halma Group’s centralized infrastructure.
• Perform real time monitoring on malicious activities, analyse logs looking for attack patterns to ensure infiltration attempts are identified and dealt in a timely manner.
• He/she will be responsible for managing technical support requests pertaining to Security devices integrated in Halma’s infrastructure.
• Provide first line of support for Halma and its subsidiary company infrastructure security.

Responsibilities:

• Perform real time security monitoring and incident response activities across the networks, leveraging a variety of tools and techniques.
• Create and improve Incident Response Playbook.
• Perform post incident reviews to improve and tune Halma’s incident response capability.
• Provide support to the team members while investigating alerts escalated by MSSP & work closely with Leads.
• Provide support in the area of Azure Active directory, Intune (conditional access/MDM), single sign on and Multifactor Authentication, Microsoft Defender for Endpoint, Microsoft Defender for Server, Office 365 email security.
• Monitor and respond to security incidents for Halma PLC and Subsidiary companies. Interact with end-users and IT Managers of Halma and Subsidiary companies during investigations, to raise awareness and training opportunities.
• Create and Maintain KB articles & SOPs for all the applications related to SOC to ensure security best practices in the team.
• Should be able to work on Incident and Security Reports Independently.

Critical Success factors:

• Successfully resolve security incidents, infrastructure support & service requests within SLA.
• Contribute to improving processes, systems and services provided by Halma IT.
• Identification of Security Risks and threats to the Group.
• Cyber security mindset is key and taking appropriate action on any cyber incident is the major aspect of this role.

Qualifications:

• Bachelor’s in computer science/IT
• Preferred Certifications:

CompTIA Security+, CEH

Microsoft Security certifications like SC-200/SC-300/SC-400

• Desirable Certifications:

any SIEM certifications, any Network certifications

Experience:

• Total experience 2-3 years.
• Exposure to security technologies including Incident Response, Microsoft Defender, Azure Sentinel.
• Knowledge of network fundamentals TCP/IP, SSL/TLS, DNS, DHCP.
• Hands on experience to Microsoft technologies like 365 ATP Defender, Endpoint Manager (Intune- conditional access/MDM/MAM) and KQL knowledge.
• Any vendor firewall and Remote Access solutions.
• Good to have – Cato Networks (VPN and Firewall), Azure Active Directory,