Soc Analyst

Bahwan CyberTek; Chennai District, Bengaluru; On-site; INR 600,000 - 900,000; Full time

Job summary

Bahwan CyberTek seeks a proactive SOC Analyst to monitor, detect, investigate, and respond to cybersecurity threats across the IT environment. The role requires hands-on experience with security monitoring tools, incident response, threat analysis, and vulnerability management.

You will work with SIEM platforms, EDR/XDR tools, and vulnerability scanners while collaborating with IT and security teams to strengthen defenses and ensure regulatory compliance.

Qualifications

• Hands-on experience with security monitoring tools and incident response.
• Knowledge of threat analysis and vulnerability management processes.
• Experience in monitoring events using SIEM platforms and performing incident triage.
• Familiarity with EDR/XDR tools and security incident containment strategies.
• Understanding of networking concepts (TCP/IP, DNS, DHCP, VPN, Firewalls).
• Knowledge of MITRE ATT&CK framework and mapping detections to tactics.
• Experience across Windows, Linux, and Active Directory environments.
• Strong analytical, troubleshooting, and communication skills.

Responsibilities

• Monitor security events and alerts using SIEM tools.
• Investigate and analyze security incidents, alerts, and potential threats.
• Perform incident triage, containment, eradication, and recovery activities.
• Monitor network traffic and identify suspicious activities.
• Conduct threat hunting and malware analysis.
• Investigate phishing, ransomware, and other cyberattack incidents.
• Perform vulnerability assessments and remediation recommendations.
• Create and maintain incident response reports and documentation.
• Collaborate with IT, infrastructure, and application teams to resolve security issues.
• Ensure compliance with security policies, standards, and best practices.
• Stay updated on emerging threats, vulnerabilities, and cybersecurity trends.

Skills

SIEM tools

Cybersecurity Fundamentals

Incident Response

Threat Monitoring

Threat Hunting

Networking basics

EDR/XDR tools

Vulnerability Mgmt

IDS/IPS

MITRE ATT&CK

Windows/ Linux/ AD

Analytical skills

Communication

Tools

Splunk

IBM QRadar

ArcSight

LogRhythm

Microsoft Sentinel

CrowdStrike

Defender

SentinelOne

Carbon Black

Nessus

Qualys

Job description

We are seeking a proactive and detail-oriented SOC Analyst to monitor, detect, investigate, and respond to cybersecurity threats and security incidents across the organization's IT environment. The ideal candidate should have hands-on experience with security monitoring tools, incident response, threat analysis, and vulnerability management.

Key Responsibilities

• Monitor security events and alerts using SIEM tools.
• Investigate and analyze security incidents, alerts, and potential threats.
• Perform incident triage, containment, eradication, and recovery activities.
• Monitor network traffic and identify suspicious activities.
• Conduct threat hunting and malware analysis.
• Investigate phishing, ransomware, and other cyberattack incidents.
• Perform vulnerability assessments and recommend remediation actions.
• Create and maintain incident response reports and documentation.
• Collaborate with IT, infrastructure, and application teams to resolve security issues.
• Ensure compliance with security policies, standards, and best practices.
• Stay updated on emerging threats, vulnerabilities, and cybersecurity trends.

Required Skills

• Experience with SIEM tools such as Splunk, IBM QRadar, ArcSight, LogRhythm, or Microsoft Sentinel.
• Strong understanding of Cybersecurity Fundamentals.
• Knowledge of Incident Response and Security Operations processes.
• Experience in Threat Monitoring and Threat Hunting.
• Understanding of networking concepts such as TCP/IP, DNS, DHCP, VPN, and Firewalls.
• Hands-on experience with EDR/XDR tools (CrowdStrike, Defender, SentinelOne, Carbon Black).
• Knowledge of Vulnerability Management tools (Nessus, Qualys).
• Familiarity with IDS/IPS technologies.
• Understanding of MITRE ATT&CK Framework.
• Experience with Windows, Linux, and Active Directory environments.
• Good analytical, troubleshooting, and communication skills.