SOC SIEM Analyst

Deloitte Shared Services India; Nagpur District; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Deloitte Shared Services India is seeking a Security Operations professional to join the Nagpur team. You will handle incident response, triage alerts from SIEMs such as QRadar, Splunk, and Chronicle, and coordinate remediation with L1/L2 teams. Experience with EDR/XDR like CrowdStrike or Cortex XDR is preferred.

You will participate in monitoring, refining runbooks, and keeping security posture up-to-date, including Windows event log analysis and network traffic concepts.

Qualifications

• 3-6 years of experience in SOC Incident response and handling.
• Knowledge of cyber-attacks, techniques, threat vectors, risk management and incident management.
• Experience with SOC monitoring and triage using SIEM tools and EDR/XDR solutions.

Responsibilities

• Review and triage information security alerts; provide analysis and track remediation.
• Escalate as appropriate and coordinate with L1/L2/L4 teams.
• Maintain and update incident response processes and Run Books.
• Stay current on SIEM alerts and oversee security monitoring tools.

Skills

SOC Incident response

Threat intelligence

Network traffic analysis

Windows event log analysis

Tools

QRadar

LogRhythm

Splunk

Sentinel

Chronicle

CrowdStrike

Cortex XDR

Microsoft Defender

Job description

Role & responsibilities

• 3-6 years of experience in SOC Incident response and handling.
• Should be working in SOC, SIEM technologies (preferrable Qradar)
• EDR/XDR solutions (CrowdStrike, Cortex XDR, Microsoft Defender)
• Review and triage information security alerts worked by L1/L2, provide analysis, determine and track remediation, and escalate as appropriate.
• Desirable to have experience of SOC Monitoring and tirage using SIEM technologies (LogRhythm, Splunk, Sentinel, Chronicle)
• Knowledge on XDR can be an added advantage
• Knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc.
• Fundamental understanding of network traffic analysis including TCP/IP, routing, switching, protocols, etc.
• Reviews the most recent SIEM alerts to see their relevance and urgency. Carries out triage to ensure that a genuine security incident is occurring. Oversees and configures security monitoring tools.
• Strong understanding ofRecorded Future Fusion, Brand protection cloud side..
• Inform L4 team of proactive and reactive actions to minimize false positives.
• Maintain, manage, improve and update security incident process and protocol documentation (Run Book).
• Strong understanding of Windows event log analysis.
• Candidate must be willing to work from Nagpur location.