Sr Administrator (Support & Operations)

HCL Technologies Limited; Greater Noida; On-site; INR 800,000 - 1,200,000; Full time

Job summary

HCLTech is seeking a skilled SOC professional to monitor and analyze security events in a 24x7 SOC, triage alerts, and lead incident response efforts. The role requires mentoring junior analysts, performing threat hunting, and collaborating on new security solutions across cloud and on-prem environments.

The ideal candidate will have strong SIEM expertise, PowerShell, AD/Group Policy knowledge, and solid ITSM experience. A focus on proactive threat research and DR readiness is essential.

Qualifications

• Advanced expertise in using SIEM for event investigation and threat detection.
• Strong knowledge of Windows Active Directory, Group Policies, and PowerShell scripting.
• Proficient in log analysis across Windows, Linux, Azure, AWS, and network security controls.
• Familiarity with the MITRE ATT&CK framework for understanding adversary tactics and techniques.
• Experience with incident response and ITSM processes such as change, incident, and problem management.

Responsibilities

• Monitor and analyze security events and threats in a 24x7 SOC environment.
• Triage alerts and tickets, escalating incidents as needed.
• Act as escalation point for SOC analysts and mentor junior team members.
• Lead incident response activities and conduct technical investigations.
• Conduct cyber threat research to enhance SIEM use cases and playbook development.
• Perform proactive threat hunting and investigations without predefined IOCs.
• Collaborate with engineering to evaluate and implement new security solutions.
• Support and manage security tools including EDR, WAF, and NIDS.
• Automate repetitive SOC tasks using scripting and workflow tools.
• Troubleshoot log issues and ensure SLAs are met.
• Participate in audits, DR drills, and risk mitigation activities.

Skills

SIEM expertise

PowerShell

Active Directory

Cloud platforms

Malware analysis

Incident response

ITSM processes

Job description

• Monitor and analyze security events and threats as part of a 24x7x365 SOC environment.
• Perform daily triage of alerts and tickets, leveraging threat intelligence and escalating incidents as needed.
• Act as a technical escalation point for SOC analysts and mentor junior team members.
• Lead incident response activities, conducting technical investigations and providing expert guidance.
• Conduct cyber threat research to enhance SIEM use cases and playbook development.
• Perform proactive threat hunting and investigations without predefined indicators of compromise.
• Collaborate with engineering teams to evaluate and implement new or updated security solutions.
• Support and manage security tools including EDR, WAF, and NIDS platforms.
• Automate repetitive SOC tasks to improve operational efficiency and reduce manual errors, using scripting and workflow tools.
• Troubleshoot and resolve log related issues, ensuring minimal disruption to business operations and adherence to SLAs.
• Support internal and external audits by providing evidence.
• Participate in disaster recovery drills, security assessments, and SOC-related risk mitigation activities.
• Work within ITSM frameworks to manage incidents, changes, and service requests.

Key Responsibilities

• Excellent communication and interpersonal skills both written and oral.
• Client relationship management
• Ability to work hands on tools and processes.
• Willing to work 24x7 project timelines

Skill Requirements

• Advanced expertise in using SIEM technologies for event investigation and threat detection.
• Strong knowledge of Windows Active Directory, Group Policies, and PowerShell scripting.
• Proficient in log analysis across Windows, Linux, Azure, O365, AWS, Google Cloud, network, and endpoint security controls.
• Familiarity with the MITRE ATT&CK framework for understanding adversary tactics and techniques.
• Experience in malware analysis and working with Endpoint Protection and EDR solutions.
• Knowledge of content filtering technologies and their application in enterprise environments.Solid understanding of network fundamentals including OSI model, TCP/IP, DNS, HTTP, SMTP, and packet capture/analysis.
• Hands-on experience with cloud platforms such as AWS, Google Cloud, and Microsoft Azure.
• Deep understanding of malware capabilities, attack vectors, and their potential impact.
• Skilled in threat analysis and vulnerability assessment methodologies.
• Experience with vulnerability scanning tools and technologies.
• Working knowledge of firewalls, VPN technologies, IDS/IPS, and web application firewalls.
• Familiarity with host-based intrusion detection systems.
• Proven experience in incident response and a solid understanding of IT Service Management (ITSM) processes such as change, incident, and problem management.

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026totaled $14.8billion.