<ul>
<li style="text-align:start;">BE/B.Tech/Post-Grad/ Graduate or Postgraduate in any other discipline</li>
</ul>

<ul>
<li style="margin-left:0px;">2-4 years of relevant experience.</li>
</ul>

<ul>
<li style="margin-left:0px;">Candidates should be okay to work in rotational shifts.</li>
</ul>

<ul>
<li style="margin-left:0px;">Good to have - Certifications - CSA (Certified SoC Analyst), CISM and CCSP, Certifications from Microsoft Azure Suite</li>
</ul>

<ul>
<li style="margin-left:0px;">Candidates having SOC experience would be preferred</li>
</ul>

<ul>
<li style="margin-left:0px;">Well versed in Microsoft productivity tools such as Word, PowerPoint and Excel</li>
</ul>

<ul>
<li style="margin-left:0px;">An understanding of concepts of analytics and should be able to generate trends, drill downs, and various graphical representations</li>
</ul>

<ul>
<li style="margin-left:0px;">Windows / Azure / AWS infrastructure knowledge will have added advantage</li>
</ul>

<ul>
<li style="margin-left:0px;">Experience in Windows security tools like Defender for office, Defender for identity, Sentinel and other Microsoft security tools will have added advantage</li>
</ul>

<ul>
<li style="margin-left:0px;">Excellent written and oral communication skills</li>
</ul>

<ul>
<li style="margin-left:0px;">Actively monitoring, analysing &amp; escalating SIEM alerts based on correlation rules,</li>
</ul>

<ul>
<li style="margin-left:0px;">Email protection alerts &amp; malware analysis,</li>
</ul>

<ul>
<li style="margin-left:0px;">Provide inputs for proactive content fine tuning &amp; use case enablement,</li>
</ul>

<ul>
<li style="margin-left:0px;">Active threat hunting on network flow, user behaviour &amp; threat intelligence,</li>
</ul>

<ul>
<li style="margin-left:0px;">Phishing email analysis for MFs,</li>
</ul>

<ul>
<li style="margin-left:0px;">Raising incidents in Pastebin inte</li>
</ul>

<ul>
<li style="margin-left:0px;">Should be familiar with Domain Knowledge (Cyber Security), Threat Hunting, SIEM- Azure Sentinel, SIEM - (RSA / Splunk / LogRhythm), Python Scripting, Windows Active Directory, Operating systems and servers.</li>
</ul>

<ul>
<li style="margin-left:0px;">Ability to Triage and assignment Incident Handling.</li>
</ul>

<ul>
<li style="margin-left:0px;">Ability to Follow Playbooks instructions- Incident Response Playbooks</li>
</ul>

<ul>
<li style="margin-left:0px;">Ability to Comprehend Logs (HTTP, SMTP, Network) (Under guidance)</li>
</ul>

<ul>
<li style="margin-left:0px;">Understand and imbibe current SOC process</li>
</ul>

<ul>
<li style="margin-left:0px;">Perform quality assessment on SOC operations being performed as per existing process</li>
</ul>

<ul>
<li style="margin-left:0px;">Record and deviations identified into tracking tool(s)/spreadsheets</li>
</ul>

<ul>
<li style="margin-left:0px;">Perform follow-ups with respective error owners to mitigate process deviations</li>
</ul>

<ul>
<li style="margin-left:0px;">Identify process deviations, Summarize and generate trends, patterns into process deviations / errors observed.</li>
</ul>

<ul>
<li style="margin-left:0px;">Perform RCA into observed errors / trends and generate recommendations for process improvement</li>
</ul>

<ul>
<li style="margin-left:0px;">Generate personnel specific recommendations for performance enhancement</li>
</ul>

<ul>
<li style="margin-left:0px;">Contribute in overseeing quality assessment process for multiple SOC verticals</li>
</ul>

<ul>
<li style="margin-left:0px;">In-line alignment with SOC operations for quick-detection / prevention of process deviations</li>
</ul>

<ul>
<li style="margin-left:0px;">Support as QA touchpoint in critical cyber incidents to enhance quality of service</li>
</ul>

<ul>
<li style="margin-left:0px;">Assessment of investigation report with assertions, evidences and recommended actions</li>
</ul>

<ul>
<li style="margin-left:0px;">Communicate effectively and collaborate with teams in different geographie</li>
</ul>

Security Engineer

Job Details & Overview

Skills Required for Security Engineer

Job Description for Security Engineer