Sr Security Analyst/ Advanced Analyst - SOC

UnitedLex; Gurugram District; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

UnitedLex is seeking an experienced Security Operations professional in India (Gurugram) to join the 24x7 SOC. The role focuses on vulnerability management, incident response, and threat intel with strong networking knowledge.

The ideal candidate has 4–7 years in security operations, hands-on experience with tools like Rapid7, SIEM, EDR, and Microsoft security suites, and a passion for protecting enterprise environments. Shift work flexibility is required.

Qualifications

• 4-7 years of experience in Security operations and incident response.
• Must have Vulnerability Management, SIEM, Network Protocol Knowledge.
• Experience with incident response and threat intel is desirable.
• Comfortable in a 24x7 SOC environment.

Responsibilities

• Provide incident response as part of the 24x7 Security Operations Center.
• Manage security vulnerabilities and risks across the organization, aiding owners to remediate.
• Collaborate with executives and technology teams to implement proactive risk controls.
• Develop strategies to identify, manage, and mitigate threats and communicate to stakeholders.
• Produce and evaluate TVM program documentation.
• Ensure thorough scanning of test, corporate, and production environments.
• Create projects in the security tools and coordinate with patching teams and owners.
• Monitor events from multiple technologies to detect malicious activity.
• Perform detailed analysis to investigate and resolve security incidents.
• Conduct initial triage and document progress throughout the incident lifecycle.
• Escalate and hand off incidents for containment and remediation.
• Tune detection rules and policies to improve accuracy.
• Coordinate with vendors and teams to define requirements and deliver projects.
• Provide weekly/monthly reports to upper management.

Skills

Vulnerability Management

SIEM

Network Protocol Knowledge

Incident Response

Forensics

Tools

Rapid7

KnowBe4

IDS/Firewall

EDR

Microsoft Security Suite

Job description

• 4-7 years of experience of working in Security operations and Incident response. L2/L3 resource preferrable.
• Mandatory Skill Sets - Vulnerability Management, SIEM, Network Protocol Knowledge
• Good to have - SOC/Rapid 7/Hunter/Sentinel One/Knowbe4
• A passion for, and deep understanding of, vulnerability and threat management.
• Vulnerability Management.
• Inhouse SOC team member (preferrable).
• Must have expert networking protocol knowledge.
• Able to demonstrate an understanding of current offensive / defensive computing and forensics.
• Should be able to provide threat Intel services.
• Prior experience detecting, analyzing and/or responding to security incidents.
• Demonstrated ability to analyze and correlate information from a wide variety of enterprise technologies.
• Hands-on experience with common security technologies (IDS, Firewall, Rapid7, EDR, Microsoft security suite etc.)
• Understanding of common security threats, attack vectors, vulnerabilities, and exploits
• Shift work, with flexibility to cover both day and nighttime shifts.

Should be able to work independently with Vendors and drive the calls whenever required.

RESPONSIBILITIES:

• Provide incident response as part of the 24x7 Security Operations Center
• Manage the security vulnerabilities and risks across WB including identifying, supporting application/system owners to manage risks and remediate vulnerabilities.
• Work closely with both business-oriented executives and technology-oriented personnel to ensure adequate processes are in place and actions are being taken to mitigate identified risks proactively.
• Develop strategies to identify, manage, and mitigate identified threats and vulnerabilities to attain desired risk profile and communicate strategies to key stakeholders.
• Produces and regularly evaluates all TVM programs and process related documentation.
• Ensure effective and complete scanning of the test, corporate and production environments.
• Create projects within the tool and monitor the progress & regular follow ups with Patching team and application & server owners.
• Monitoring of events & alerts from a multitude of technologies to detect malicious activity.
• Detailed analysis using a variety of tools and techniques to investigate, navigate, correlate, and fully understand security incidents of the data available.
• Conducts initial triage of security events and incidents. Facilitates communication within the SOC and documents progress throughout the Incident Response Lifecycle.
• Recognizes potential, successful, and unsuccessful intrusion attempts and compromises through reviews and correlation with different security tools.
• Proper escalation and hand-off of security incidents for containment and remediation.
• Tuning of rules, filters, and policies for detection-related security technologies to improve accuracy and visibility.
• Jumping on the call with Vendors and other teams to discuss issues / to get their requirements and deliver the same in the form of projects.

Providing weekly/monthly reports to the Upper Management.

ISO 27001:2022 is the standard that we follow in this organization , Based on this ISO document we have implemented 92 controls in UnitedLex across multiple offices and also with the help of this document we have implemented the Information Security Management System in the Organization