Walk-in | Soc Analyst

Tata Consultancy Services; Ernakulam; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Tata Consultancy Services is seeking a Security Operations professional to monitor SIEM technologies, analyze incidents, and respond to security events. You will align monitoring with stakeholder requirements and research emerging threats to improve defenses.

Ideal candidates will have experience with SIEM tools, incident response, and mentoring junior staff, with flexibility for 24/7 shift patterns and cross-office support.

Qualifications

• Experience with SIEM tuning and incident response.
• Ability to translate security incidents into monitoring requirements.
• Proficient in using forensic/investigation tools.
• Knowledge of VPN technology and network fundamentals.
• Experience mentoring junior team members and coordinating with stakeholders.

Responsibilities

• Monitor multiple security technologies and tune SIEM correlation rules.
• Perform in-depth incident and event analysis.
• Respond to and handle security incidents.
• Align reporting and monitoring requirements with business stakeholders.
• Conduct research on emerging security threats and update SOPs.

Skills

SIEM tuning

Incident analysis

Incident response

Stakeholder reporting

Threat research

SOP documentation

Mentor junior staff

SIEM tools

Network fundamentals

VPN technology

Investigation tools

Network diagrams

24/7 shift flexibility

Forensic tools

Job description

Skills Required:

• Monitor multiple security technologies such as SIEM, Antivirus, Vulnerability management, Web Proxy, Security Patch management.
• Tune/Create SIEM correlation rules.
• Perform in-depth incident and event analysis.
• Respond and handle the security incidents.
• Agree and align on reporting and monitoring requirements with business stakeholders.
• Conduct research on emerging security threats.
• Modify Standard Operating Procedures (SOPs) and training documentation.
• Coach junior team members.
• Good Knowledge on SIEM tools like QROC, Arcsight, SPLUNK or Sentinel.
• Knowledge and experience with PCs, LAN topologies, routers, hubs, and terminal servers
• Knowledge of security applications such as IDS, Security Event Management and anomaly detection tools.
• Knowledge of VPN technology.
• Knowledge of investigation tools like FTK imager, memory dump, threat analysis tools.
• Ability to read and interpret network diagrams.
• Oversight of facilitates for other offices in the UK and provide support and guidance where required.
• Ability to translate event analysis findings into new monitoring proposals.
• Remain flexible with 24/7 shift and task assignments.