About the Company

You will be part of the Cyber Defence Group responsible for SOC monitoring.

About the Role

You will be responsible for 24*7 monitoring of alerts and raising of incidents, performing initial triage of events, investigating security events, following up for closure of security incidents raised, continuously looking for opportunities to enhance monitoring activity, preparing investigation reports, proactively identifying control weaknesses, researching the latest IT and OT security trends, assisting Senior Analysts in incident investigation and response, and providing recommendations to improve Threat analysis process flows.

Experience Range-3-8Years

Location-Chennai

Notice Period-Immediate to 30Days

Responsibilities

24*7 monitoring of alerts and raising of incidents.
Perform initial triage of events as per defined playbooks.
Investigate security events from various sources.
Follow-up for closure of security incidents raised.
Continuously look for opportunities to enhance the efficacy of the monitoring activity, review logs beyond the usecases based alerts and identify outliers that can be investigated.
Prepare Investigation reports.
Proactively identify control weaknesses and escalate for early remediation.
Research the latest IT and OT security trends.
Assist Senior Analysts in incident investigation and response.
Provide recommendations to improve Threat analysis process flows.

Qualifications

Completion of one of the listed degrees “B.E./B. Tech/MCA/BSC-IT/Computers/BCA” with 2 to 4 years of experience.

Required Skills

Practical working experience in SOC monitoring, preferably using Microsoft Sentinel and IBM Qradar SIEM Solution.
Exposure to multiple clients is an added advantage.
In depth understanding of Cyber Security Threats, Threat Analysis, ability to explain recent attacks in a detailed technical manner.
Working exposure in various security products like Firewall, IPS, DLP, Email security, SIEM, etc.
Working knowledge on Windows environment.
Familiar with SIEM rules and its purpose of creation.
Must have the knack to multi-task across multiple customers.
Very good understanding of Network Protocols, Virtualization and Web / DB server environments.

Preferred Skills

You should at the minimum possess CCNA / CEH / CompTIA Sec+ / Security product-based certification.

L&T Technology Services

More Information