SOC L1 Thane 2-4Yrs Immediate Joiners

WNS; Mumbai; Presencial; INR 600.000 - 1.000.000; Jornada completa

Descripción de la vacante

WNS in Mumbai seeks a security operations professional to monitor, investigate, and respond to incidents using SIEM platforms such as Cortex XSIAM, IBM QRadar, and Microsoft Sentinel.

You will perform threat hunting, triage alerts, maintain SOC runbooks, and contribute to detections and incident response processes while collaborating with global teams.

The role requires a Bachelor in CS/IS, security certifications, 2–3 years of SOC experience, and strong communication skills.

Formación

• Bachelor's degree in Computer Science or Information Systems.
• Information Security certifications (CEH, CHFI and CompTIA Security+) with 2–3 years of SOC operation experience.
• Excellent verbal, written, and analytical skills; ability to work well in a team and adapt to new tools.

Responsabilidades

• Monitor, analyze, and investigate security events and alerts in real time from multiple security tools and log sources.
• Perform incident triage, containment recommendations, and first-level escalation management.
• Conduct proactive threat hunting, IOC enrichment, threat intelligence analysis, and event correlation.
• Manage day-to-day SIEM operations, including log source health monitoring, alert tuning, and use case optimization.
• Support development and enhancement of security detections, correlation rules, and incident response processes.
• Maintain and update SOC SOPs, runbooks, knowledge articles, and operational procedures.
• Independently investigate and resolve security incidents while ensuring adherence to defined SLAs.

Conocimientos

Verbal communication

Analytical thinking

Team collaboration

Adaptability

Educación

Bachelor's Degree in Computer Science or Information Systems

Herramientas

Cortex XSIAM

IBM QRadar

Microsoft Sentinel

CrowdStrike Falcon EDR

Defender for Endpoint

Threat intelligence

Descripción del empleo

Job Description:

Company Description

WNS, part of Capgemini, is an Agentic AI-powered leader in intelligent operations and transformation, serving more than 700 clients across 10 industries, including Banking and Financial Services, Healthcare, Insurance, Shipping and Logistics, and Travel and Hospitality. We bring together deep domain excellence – WNS’ core differentiator – with AI-powered platforms and analytics to help businesses innovate, scale, adapt and build resilience in a world defined by disruption.Our purpose is clear: to enable lasting business value by designing intelligent, human-led solutions that deliver sustainable outcomes and a differentiated impact. With three global headquarters across four continents, operations in 13 countries, 65 delivery centers and more than 66,000 employees, WNS combines scale, expertise and execution to create meaningful, measurable impact.

Job Description

• Hands-on experience with Cortex XSIAM, IBM QRadar, Microsoft Sentinel, and other SIEM platforms for security monitoring, correlation, threat detection, and incident investigation.
• Experience with CrowdStrike Falcon EDR, Microsoft Defender for Endpoint (MDE), Bitsight, and threat intelligence platforms.
• Monitor, analyze, and investigate security events and alerts in real time from multiple security tools and log sources.
• Perform incident triage, analysis, containment recommendations, and first-level escalation management.
• Conduct proactive threat hunting, IOC enrichment, threat intelligence analysis, and event correlation activities.
• Manage day-to-day SIEM operations, including log source health monitoring, alert tuning, and use case optimization.
• Support development and enhancement of security detections, correlation rules, and incident response processes.
• Maintain and update SOC SOPs, runbooks, knowledge articles, and operational procedures.
• Independently investigate and resolve security incidents while ensuring adherence to defined SLAs.
• Possess strong knowledge of TCP/IP, OSI Model, network protocols, cybersecurity threats, attack techniques, and MITRE ATT&CK framework.
• Collaborate with internal teams on vulnerability management, security posture improvement, and remediation activities.
• Prepare and present weekly and monthly SOC operational reports, security metrics, dashboards, and threat trend analysis.

Qualifications

• Bachelor's Degree in Computer Science, Information Systems.
• Information Security certifications (CEH, CHFI and Comp TIA Security +)2-3 years of work experience SOC Operation and Engineering in a Medium/Large Global Organization.
• Excellent verbal, written, and analytical skills
• Ability to work well in team environment
• Ability to adopt new technologies and tools.