SOC Analyst

Uzaif; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Uzaif in Hyderabad is seeking an experienced SOC Analyst to join their enterprise security team. This role involves security monitoring, incident response, and configuring security technologies to protect their infrastructure.

The ideal candidate will have 5-7 years of experience, strong knowledge of security technologies including SIEM and EDR, and proficiency in scripting. The position promises a dynamic work environment with collaboration across teams to enhance security policies.

Qualifications

• 5-7 years of experience in a Security Operations role.
• Strong knowledge of security technologies: SIEM, EDR, FIM, IDS/IPS, WAF, and DLP.
• Proficiency in scripting (Python, Perl, Bash, PowerShell).

Responsibilities

• Perform incident response and forensic analysis.
• Configure and manage the Elastic stack (Elastic Search, Logstash, Kibana).
• Conduct vulnerability scans and security assessments using tools like Tenable.

Skills

Incident response

Security technologies

Scripting (Python, Perl, Bash, PowerShell)

Unix/Linux/Windows administration

Communication protocols (HTTP, DNS, TCP/UDP)

Technical communication

Tools

Elastic stack

Tenable

Job description

About the Role

We are seeking an experienced SOC Analyst to join our enterprise security team. You will be responsible for security monitoring, incident response, and the configuration of security technologies to protect our infrastructure.

Key Responsibilities

• Perform incident response and forensic analysis.
• Configure and manage the Elastic stack (Elastic Search, Logstash, Kibana).
• Conduct vulnerability scans and security assessments using tools like Tenable.
• Analyze event logs, packet captures, and system logs to identify threats.
• Collaborate across teams to remediate vulnerabilities and manage security policies.

Required Skills & Qualifications

• 5-7 years of experience in a Security Operations role.
• Strong knowledge of security technologies: SIEM, EDR, FIM, IDS/IPS, WAF, and DLP.
• Proficiency in scripting (Python, Perl, Bash, PowerShell).
• Understanding of Unix/Linux/Windows administration and cloud environments (AWS/Azure).
• Experience with communication protocols (HTTP, DNS, TCP/UDP).
• Excellent communication skills with the ability to explain complex technical vulnerabilities to non-technical stakeholders.

Desired Certifications

• CompTIA Security+ / PenTest+
• EC-Council (CEH, ECIH, CHFI, CND)
• Cisco CyberOps
• GIAC (GCED, GCIA, GCIH)
• ISC2 (CISSP, CSSP)