SOC Analyst Level 3

Tekskills Inc.; Dadri; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Tekskills Inc. is seeking a seasoned security incident response professional with 5+ years of experience. You will lead detection use cases, tune SIEM rules, and coordinate cross-functional teams to rapidly remediate threats.

The role emphasizes incident response leadership, playbook development, and performance reporting to improve detection and response metrics across the organization.

Qualifications

• Minimum 5+ years of cybersecurity experience.
• Experience designing detection rules based on risks.
• Knowledge of log formats and parsing for use cases.
• Familiarity with SIEM platforms (Securonix, Sentinel, Splunk).
• Ability to tune alerts to reduce false positives.

Responsibilities

• Detect and respond to company-wide security incidents.
• Lead incident response for high impact events.
• Triage events, escalations and incidents for remediation actions.
• Coordinate response activities with cross-functional teams.
• Develop playbooks to improve processes and information sharing.
• Support Security Operations and Incident Response with SME input.
• Participate in current operations and on-call rotations, including after-hours.

Skills

5+ years experience

Use Case Development

Log Sources

SIEM/Analytics

Alert Tuning

Incident Response Coordination

Playbook Development

On-call / After-hours

Tools

Securonix

Microsoft Sentinel

Splunk

Job description

Job Description:

Minimum 5+ years of experience

• Use Case Development: Knowledge of organizational risks and threats to design relevant and effective detection rules.
• Log Sources: Understanding log formats, sources, and parsing for accurate data utilization in use cases.
• SIEM and Analytics Tools: Familiarity with platforms like Securonix, Sentinel, or Splunk to implement and monitor use cases.
• Alert Logic: Ability to define thresholds, logic, and conditions to reduce false positives and improve detection accuracy.
• Incident Response Needs: Awareness of incident response workflows to align use cases with actionable intelligence.
• Performance Metrics: Skills to create and optimize KPI/KRI reports to track detection and response performance.
• Fine-Tuning Methodology: Experience in analyzing alert data to refine use cases and adjust logic periodically. Detect and respond to company-wide security incidents, coordinating cross-functional teams to mitigate and eradicate threats.
• Incident response lead for high impact cyber security incidents
• Triage events, escalations and incidents to determine remediation and resolution actions
• Coordinate appropriate response activities across teams or directly with stakeholders to rapidly remediate potential threats
• Develop playbooks to improve processes and information sharing across teams
• Initiative and project-related support to provide Security Operations and Incident Response perspective and subject matter expertise
• Contribute technical and process improvements within the team
• Participate in current operations, on call rotation. Which includes some after-hours responsibilities and escalations.