SOC SIEM Analyst-Consultant

Deloitte Shared Services India; Nagpur District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Deloitte Shared Services India is looking for a SOC Security Analyst to join our Nagpur team. You will handle incident response, review security alerts, and coordinate remediation across SOC processes.

You will work with SIEM and EDR/XDR tools, perform log analysis, and support L1/L2 incident handling with a focus on reducing false positives and improving monitoring efficacy.

Qualifications

• 3–6 years of experience in SOC incident response and handling.

Responsibilities

• Review and triage security alerts from L1/L2, provide analysis and track remediation.
• Maintain and update security incident process and Run Book documentation.
• Inform L4 team of proactive and reactive actions to minimize false positives.

Skills

SOC Incident Response

SIEM Technologies

EDR/XDR

Alert Triage

Threat Intelligence

Network Analysis

Windows Event Logs

Incident Management

Tools

Qradar

CrowdStrike

Cortex XDR

Microsoft Defender

LogRhythm

Splunk

Sentinel

Chronicle

Job description

Role & responsibilities

• 3-6 years of experience in SOC Incident response and handling.
• Should be working in SOC, SIEM technologies (preferrable Qradar)
• EDR/XDR solutions (CrowdStrike, Cortex XDR, Microsoft Defender)
• Review and triage information security alerts worked by L1/L2, provide analysis, determine and track remediation, and escape as appropriate.
• Desirable to have experience of SOC Monitoring and tirage using SIEM technologies (LogRhythm, Splunk, Sentinel, Chronicle)
• Knowledge on XDR can be an added advantage
• Knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc.
• Fundamental understanding of network traffic analysis including TCP/IP, routing, switching, protocols, etc.
• Reviews the most recent SIEM alerts to see their relevance and urgency. Carries out triage to ensure that a genuine security incident is occurring. Oversees and configures security monitoring tools.
• Strong understanding ofRecorded Future Fusion, Brand protection cloud side..
• Inform L4 team of proactive and reactive actions to minimize false positives.
• Maintain, manage, improve and update security incident process and protocol documentation (Run Book).
• Strong understanding of Windows event log analysis.
• Candidate must be willing to work from Nagpur location.