SOC Analyst I

DP World; Karnataka; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

DP World in Karnataka, India is seeking a seasoned Security Operations Center (SOC) lead to oversee 24/7 security monitoring, incident response, and threat hunting. You will manage a team of security analysts, develop KPI dashboards, coordinate cross-functional remediation, and report to executive leadership.

The role requires 5–7 years in IT security with strong logging, SIEM and SOAR experience, and relevant certifications. The position is on-site at our Karnataka facility.

Qualifications

• Bachelor’s degree in Computer Science or equivalent.
• 5–7 years of IT security experience with at least 4 years in security operations and log analysis.
• Proficient in security technologies, networks and TCP/IP/OSI concepts.
• Professional certifications such as GSEC, Security+, CEH, CySA.
• Experience with e-commerce, logistics, and port operations is a plus.

Responsibilities

• Oversee day-to-day SOC operations and manage security analysts.
• Develop and maintain KPI reports on SOC performance.
• Prepare security operation reports for executives and regional teams.
• Coordinate incident response and lead the investigation lifecycle.
• Triage alerts from SIEM, IDS/IPS and EDR tools.
• Collaborate with IT teams to remediate vulnerabilities and log configuration.
• Conduct threat hunting and document findings and remediation actions.
• Document incidents with timelines, impact and actions.

Skills

Analytical thinking

Time management

Decision making

Team collaboration

Multitasking

Communication skills

Cultural awareness

Reporting skills

Education

Bachelor’s degree in Computer Science or equivalent

Tools

SIEM

IDS/IPS

SOAR

EDR / endpoint protection

Job description

Key accountabilities

• Perform and provide oversight for day-to-day security SOC operations duties, including the management of security analysts, the development and implementation of security policies and procedures, and the response to security alerts.
• Develop and maintain KPI reports on SOC team performance and other aggregated performance metrics.
• Develop reports on Security operations for executive management and regional teams.
• Manage a team of SOC analysts including rostering / shifts planning, tasks allocation and coordination.
• Continuously monitor security events and alerts generated by various security monitoring tools, such as SIEM (Security Information and Event Management) systems, IDS/IPS (Intrusion Detection/Prevention Systems), and endpoint protection platforms.
• Identify and analyze security incidents based on the available information. Classify and prioritize incidents according to their severity and potential impact. Initiate and coordinate the incident response process, following predefined procedures and workflows.
• Work with different IT teams to troubleshoot and resolve security-related issues and assist in configuring the logs to be forwarded from their respective systems to the centralized logging system.
• Analyze vulnerability scan results and work with system owners and IT teams to remediate identified vulnerabilities within specified timeframes.
• Provide recommendation for Security Use-case creation and optimization for any new/existing systems.
• Conduct Network and Endpoint log analyses including threat hunting activities and present findings.
• Studying vulnerabilities, identifying relevant threats, corrective actions recommendations and reporting results.
• Document all incidents, investigations, and analysis activities accurately and thoroughly. Prepare incident reports, including detailed information on the incident timeline, impact, and recommended remediation actions.

OTHER

• Act as an ambassador for DP World at all times when working; promoting and demonstrating positive behaviours in harmony with DP World’s Principles, values and culture; ensuring the highest level of safety is applied in all activities; understanding and following DP World’s Code of Conduct and Ethics policies.
• Perform other related duties as assigned.

Knowledge and Experience

• Bachelor’s Degree in Computer Science or equivalent.
• Should have 5-7 years of experience in IT Security with at least 4 years’ experience in conducting analysis of log data and security operations center.
• Technical and hands-on experience across Cyber Security and technology domains.
• Background in security technologies, network protocols and operations and understanding of TCP/IP protocol and OSI Seven Layer Model.
• Computer programming and scripting languages.
• Strong understanding of the Cyber Kill Chain, pervasive threats attack methods and remediation.
• Industry recognized professional certifications such as GSEC, Security+, CEH, CySA.
• Good understanding in E-commerce, logistics, supply chain & port operations applications will be added advantage.

Soft Skills

• Sound analytical and intellectual capabilities.
• Excellent time management and organizational skills.
• Decision-making abilities.
• Team player and conflict management skills.
• Ability to multi-task, prioritize, coordinate, and work well under pressure to meet deadlines.
• Strong interpersonal and communication skills ability to work in a team environment.
• Cultural awareness.
• Must possess Excellent Reporting Skills.

Technical Skills

• Knowledge of Security Orchestration and Automation (SOAR) solutions.
• Experience with two or more analysis tools used in a CIRT or similar investigative environment.
• Ability to analyse and triage IoCs.

#L1-MP1