SOC L2/L3

Tata Consultancy Services Limited; New Delhi; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Tata Consultancy Services Limited (TCS) is hiring for a roles-focused SOC L2/L3 position in Delhi. The candidate will work in a 24/7 SOC environment, handling incident response, analysis, and RCA for major incidents.

Proficiency across Sentinel, Splunk, QRadar, and DNIF is essential. The role involves SIEM installation/configuration, report/dashboard creation, threat hunting, and parser development for diverse security tools on Unix/Linux/Windows platforms.

Qualifications

• Hands-on experience with SIEM platforms (Sentinel, Splunk, QRadar) and incident monitoring.
• Experience in a Cyber Security SOC environment with incident response and analysis in a 24/7 setup.
• Ability to configure, upgrade and maintain SIEM infrastructure and create actionable reports.

Responsibilities

• Must have hands-on experience on Sentinel/Splunk, QRADAR SIEM/DNIF etc.
• Experience as a Cyber Security SOC -Analyst, incident response, incident analysis in a 24/7 SOC environment
• Installation, configuration and version upgrades for SIEM infrastructure.
• Ability to create/generate reports and customized dashboards.
• Providing RCA for major incidents in customer environments
• Understanding of Incident response plan.
• Threat hunting experience and fine-tuning of use cases.
• Create custom parsers for integrating various apps and security tools.
• Basic server/application management of Unix/Linux/Windows.

Skills

Sentinel

Splunk

QRadar

DNIF

SIEM

Tools

Sentinel

Splunk

QRadar

DNIF

SIEM

Job description

TCS has been a great pioneer in feeding the fire of Young Techies like you. We are a global leader in the technology arena and there's nothing that can stop us from growing together.

Role: SOC L2/L3

Location: Delhi

Experience: 7+ Years

Roles and responsibilities

1. Must have hands-on experience on Sentinel/Splunk, QRADAR SIEM/DNIF etc.
2. Experience as a Cyber Security SOC -Analyst, incident response, incident analysis(incident management) in 24/7 SOC environment
3. Installation, configuration and version upgrades for SIEM infrastructure.
4. Ability to create/generate reports and customized dashboards.
5. Providing RCA for the major incident occurred in customer environment
6. Understanding of Incident response plan.
7. Good hands-on experience on threat hunting/ (Active and Passive) and use case fine tuning.
8. Able to create custom parsers for integrating various applications, databases and security tools.
9. Basic server/application management of Unix/Linux/Windows platform.
10. Brand Protection Intelligence - Monitoring of any suspicious activity related to brand on Dark web, deep net or underground forums for:
1. Direct threats against or targeting system
2. Relevant domains, email addresses, and external subnets on the deep and dark web.
3. Unlimited takedown services
4. Brands and aliases mentioned on the deep and dark web.
11. Adversary Centric Intelligence - Threat actor profiling to mitigate/control the issue proactively