Soc Analyst

Capgemini; Pune District; Hybrid; INR 900,000 - 1,500,000; Full time

Job summary

Capgemini Pune is seeking a seasoned cybersecurity professional with 4–9 years of experience to join our Security Operations team. You will monitor incidents, perform triage, and contribute to threat hunting and remediation across SIEM, network, and endpoint security.

The role emphasizes forensics, malware analysis, vulnerability management, and cloud security (Azure/AWS/GCP), with opportunities to mentor junior analysts and improve reporting and dashboards.

Qualifications

• Experience in SOC operations, IR, and threat hunting.
• Hands-on with SIEM tools such as Splunk and Chronicle.
• Strong network security skills: IDS/IPS, firewalls, TCP/IP, Wireshark, Nmap.
• Proficiency in Windows and Linux administration and endpoint security.
• Experience with forensics, malware analysis, threat intelligence, and vulnerability management (Qualys/Kali).
• Scripting in Python, PowerShell, Bash, or YARA-L.
• Cloud security experience in Azure, AWS, or GCP.
• Knowledge of NIST Cybersecurity Framework and security best practices.

Responsibilities

• Monitor, analyze, and respond to security incidents and threats.
• Perform event correlation, incident triage, investigation, and remediation.
• Monitor security tools including SIEM, IDS/IPS, firewalls, EDR, and endpoint security solutions.
• Conduct threat hunting, vulnerability assessment, and root cause analysis.
• Research emerging cyber threats and recommend security improvements.
• Create and maintain security reports, dashboards, and incident documentation.
• Collaborate with IT and business teams to strengthen security posture.
• Mentor junior analysts (for senior/lead positions).

Skills

SOC Operations

Incident Response

Threat Hunting

SIEM (Splunk)

SIEM (Chronicle)

Network Security

IDS/IPS

Firewalls

TCP/IP

Wireshark

Nmap

Windows Administration

Linux Administration

Endpoint Security

Forensics

Malware Analysis

Threat Intelligence

Vulnerability Management

Python

PowerShell

Bash

YARA-L

Azure

AWS

GCP

NIST CSF

Education

Bachelor's or Master's in CS/Cyber Security/IT/Engineering

Tools

Splunk

Chronicle

Qualys

Kali

Wireshark

Nmap

PowerShell

Python

Job description

Experience: 4-9 Years

Key Responsibilities

• Monitor, analyze, and respond to security incidents and threats.


• Perform event correlation, incident triage, investigation, and remediation.


• Monitor security tools including SIEM, IDS/IPS, firewalls, EDR, and endpoint security solutions.


• Conduct threat hunting, vulnerability assessment, and root cause analysis.


• Research emerging cyber threats and recommend security improvements.


• Create and maintain security reports, dashboards, and incident documentation.


• Collaborate with IT and business teams to strengthen security posture.


• Mentor junior analysts (for senior/lead positions).

Required Skills

• Strong experience in SOC Operations, Incident Response, and Threat Hunting.


• Hands‑on experience with SIEM tools (Splunk, Chronicle).


• Expertise in Network Security, IDS/IPS, Firewalls, TCP/IP, Wireshark, Nmap.


• Knowledge of Windows/Linux Administration and endpoint security.


• Experience with Forensics, Malware Analysis, Threat Intelligence, and Vulnerability Management (Qualys/Kali).


• Scripting exposure in Python, PowerShell, Bash, or YARA-L.


• Cloud security experience in Azure, AWS, or GCP.


• Understanding of NIST Cybersecurity Framework and security best practices.

Preferred Certifications

• CISSP, CISM, CEH, ECSA, CHFI, CND, GIAC, or CCNA.

Education

• Bachelor's/Master's degree in Computer Science, Cyber Security, Information Technology, Engineering, or related field.

Nice to Have

• Experience with SCADA/OT Security.


• Power BI and SharePoint.


• Azure AD, CASB, Conditional Access, and Zero Trust architecture.