Soc Analyst

Tata Consultancy Services; Hyderabad; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Tata Consultancy Services in Hyderabad seeks a security operations specialist to monitor and analyze multiple security technologies, including SIEM, antivirus, vulnerability management, and web proxy. You will tune SIEM correlation rules, respond to incidents, and align reporting with stakeholders.

Ideal candidates will have deep knowledge of SIEM tools such as QROC, ArcSight, Splunk or Sentinel, plus familiarity with VPNs and network diagrams; 24/7 shift flexibility is required.

Qualifications

• Experience with SIEM and incident analysis.
• Ability to tune/craft SIEM correlation rules.
• Knowledge of security monitoring and incident response processes.

Responsibilities

• Monitor security technologies (SIEM, Antivirus, Vulnerability management, Web Proxy, Patch management).
• Tune/Create SIEM correlation rules.
• Perform in-depth incident and event analysis.
• Respond and handle security incidents.
• Coordinate reporting with business stakeholders.
• Research emerging security threats.
• Modify SOPs and training docs.
• Coach junior team members.
• Translate findings into new monitoring proposals.

Skills

Analytical thinking

Team coaching

Attention to detail

Communication

Troubleshooting

Tools

QROC

ArcSight

Splunk

Sentinel

FTK Imager

Job description

Role & responsibilities

• Monitor multiple security technologies such as SIEM, Antivirus, Vulnerability management, Web Proxy, Security Patch management.
• Tune/Create SIEM correlation rules.
• Perform in-depth incident and event analysis.
• Respond and handle the security incidents.
• Agree and align on reporting and monitoring requirements with business stakeholders.
• Conduct research on emerging security threats.
• Modify Standard Operating Procedures (SOPs) and training documentation.
• Coach junior team members.
• Good Knowledge on SIEM tools like QROC, Arcsight, SPLUNK or Sentinel.
• Knowledge and experience with PCs, LAN topologies, routers, hubs, and terminal servers
• Knowledge of security applications such as IDS, Security Event Management and anomaly detection tools.
• Knowledge of VPN technology.
• Knowledge of investigation tools like FTK imager, memory dump, threat analysis tools.
• Ability to read and interpret network diagrams.
• Oversight of facilitates for other offices in the UK and provide support and guidance where required.
• Ability to translate event analysis findings into new monitoring proposals.
• Remain flexible with 24/7 shift and task assignments.