Soc Analyst

Tata Consultancy Services; Chennai District, Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Tata Consultancy Services is seeking a security operations professional in Chennai, India, to monitor services across SIEM, antivirus, vulnerability management, and web proxy environments. The role includes tuning SIEM correlation rules and performing in-depth incident analysis to drive rapid response and reporting alignment with business stakeholders.

The ideal candidate will update SOPs, train junior staff, and stay ahead of threats through ongoing research and tool usage (QROC, ArcSight,

Qualifications

• Experience with monitoring multiple security technologies (SIEM, antivirus, vulnerability management, web proxy).
• Ability to tune and create SIEM correlation rules.
• Experience in incident and event analysis and incident response.
• Ability to report and align monitoring with business stakeholders.
• Familiarity with security applications (IDS, anomaly detection).
• Experience with investigation tools like FTK Imager and memory dump analyses.

Responsibilities

• Monitor multiple security technologies such as SIEM, Antivirus, Vulnerability management, Web Proxy, Security Patch management.
• Tune/Create SIEM correlation rules.
• Perform in-depth incident and event analysis.
• Respond and handle the security incidents.
• Align reporting and monitoring requirements with business stakeholders.
• Conduct research on emerging security threats.
• Modify SOPs and training documentation.
• Coach junior team members.
• Utilize SIEM tools (QROC, ArcSight, SPLUNK, Sentinel).
• Knowledge of VPN, IDS, and other security tools.

Skills

Incident analysis

Threat research

Coaching junior staff

Stakeholder communication

Tools

QROC

ArcSight

Splunk

Microsoft Sentinel

VPN technology

FTK Imager

Memory dump tools

Job description

Role & responsibilities

• Monitor multiple security technologies such as SIEM, Antivirus, Vulnerability management, Web Proxy, Security Patch management.
• Tune/Create SIEM correlation rules.
• Perform in-depth incident and event analysis.
• Respond and handle the security incidents.
• Agree and align on reporting and monitoring requirements with business stakeholders.
• Conduct research on emerging security threats.
• Modify Standard Operating Procedures (SOPs) and training documentation.
• Coach junior team members.
• Good Knowledge on SIEM tools like QROC, Arcsight, SPLUNK or Sentinel.
• Knowledge and experience with PCs, LAN topologies, routers, hubs, and terminal servers
• Knowledge of security applications such as IDS, Security Event Management and anomaly detection tools.
• Knowledge of VPN technology.
• Knowledge of investigation tools like FTK imager, memory dump, threat analysis tools.