Cyber Security SOC - Technical Specialist-Cybersecurity

About the Role

Area(s) of responsibility Cyber Security SOC Analyst Job Responsibilities: - Incident and Data breach handling experience (example Ransomware, Malware attack etc.) - Understanding and defending knowledge in Cyber Security (Ex. Blue Teaming, MITRE ATT&CK Matix, Cyber Kill Chain, NIST CSF etc.) - Alerts identification (example identify false positive) and incident triaging - Understanding about Security Incident Event Management (SIEM) and SOC Operations - Monitor, detect and respond to threats in customer environments using our SOC platform - Tune threat detection for both general and specific customer environments to minimize false positive and amplify productivity - Understanding and implementing knowledge on EDR Platform (Ex. Crowdstrike) - Maintain & formulate Standard Operating Procedures for SOC Security Services - Maintain proficiency by following the latest trends and developments in cybersecurity - Report presentation to stakeholders - Maintain proficiency by following the latest trends and developments in cybersecurity - Act as an escalation resource for Open Systems SOC Security Analysts who are triaging security events and observations to identify potential threats - Create reports for customers and internal operational use on an ongoing basis - Broaden coverage of detection by identifying opportunities to acquire, ingest and analyze Data and logs from additional sources and technologies - Help extend malware analysis capability , execute malware triage - Create and update documentation to support ongoing operations - Collaborates with Security Operations Center (SOC) Analyst to monitor and analyze security alerts and events. Experience, Skills & Qualifications - Overall Exp: 4 -6 years - Strong knowledge of concepts like Blue Teaming or Purple Teaming, Threat Hunting, EDR, SIEM - Experience using EDR (Crowdstrike, Sophos etc.) and SIEM systems (Splunk, Microsoft Sentinel etc.) - Strong understanding of security operations, process, and procedures with specific reference to incident response and threat intelligence - Able to work collaboratively on a global basis and help build team capability - Familiarity with common and latest forms of malware, attacker tools, and techniques - Strong awareness of the current global threat landscape - Hands-on experience installing, configuring, or tuning some or all of the following security technologies: Cyber Security Analytics, Secure web gateways/web proxy, endpoint protection (EPP/AV/HIDS), endpoint detection and response solutions (EDR example Crowdstrike Falcon), DLP/FIM, SSL Certificate Manager and VPN/encryption. - Azure Security/ AWS Security certifications are added advantages <div class="