Job Description

Skill - SOC AnalystExp - 3 to 6 YearsLocation - HYD/Chennai:
1. Support Security Operations Center (SOC) as a shift lead, performing threat based detailed investigations, recommending incident detection methodologies, and providing expert support to incident response and monitoring functions.
2. Be a technical and thought leader in driving KPI metrics, automation, analytics, and operational efficiencies.
3. Provide recommendations to improve security postures or reduce security risk and assist in identifying opportunities for automation to save manual efforts.
4. Ensure fullest quality of SOC service delivery, and help in maturing incident response actions, policies, procedures including process improvements.
5. Act as escalation point for all advanced security incident escalations from L1 SOC analysts and responsible for all SOC activities or BAU happening in a shift (24/7 support).
6. Perform review, enhance run books, operating procedures and playbooks, assign and prioritize tasks/incidents to SOC L1 team members.
7. Manage incidents in pipeline including escalation of outstanding incidents, incidents requiring updates, and escalation of open incidents where necessary.
8. Responsible for meeting SLA and leading SOC shift handover calls. Provide continuous improvement and on job training for L1 SOC analysts.
9. Expert in analyzing logs from network devices, applications, infra services, platforms, security products and endpoint data using SIEM and various security technologies.
10. Manage security event or incident investigations, and anchor/handle incidents by following industry well known incident detection, response frameworks like NIST, MITRE, etc.
11. Support to comply with customer/client Audit requirements and generation of compliance report, artifacts collection, preparation of testing design and testing of process effectiveness.Requirements:
1. At least 6 years of experience required in security incident response or in security operations center (SOC)
2. Bachelor Degree in Information Technology or computer science, willing to work in rotational shifts - 24/7 schedule
3. Strong working knowledge of security-relevant data, including network protocols, ports and common services, such as TCP/IP network protocols and application layer protocols (e.g. HTTP/S, DNS, FTP, SMTP, Active Directory etc.)
4. Ability to communicate technical details effectively in writing and verbally to IT personnel and management.
5. Knowledge of security best practices and concepts, security frameworks, security incident handling platforms.
6. Having certifications like CEH, GCIA and incident response expertise will be an additional advantage.
7. Good to have people management skills.

Virtusa