SOC Analyst

About the Role

Qualitest is seeking a vigilant SOC Analyst to join our Security Operations Center. In this role, you will be responsible for monitoring, analyzing, and responding to security incidents, ensuring the protection of our systems and data. You will work with various security tools, analyze logs, and manage incidents through their lifecycle.

Key Responsibilities

• Acknowledge, analyze, and validate incidents triggered from correlated events through SIEM solutions.
• Acknowledge, analyze, and validate incidents received through other reporting mechanisms such as email, phone calls, management directions, etc.
• Collect necessary logs to aid in incident containment and security investigation.
• Escalate validated and confirmed incidents to the SOC Lead.
• Undertake first stages of false positive and false negative analysis.
• Understand the structure and meaning of logs from various sources like Firewalls, IDS, Windows Domain Controllers, Cisco appliances, AV and antimalware software, email security, etc.
• Open incidents in the ITSM Platform to report triggered alarms or detected threats, ensuring all details, logs, alarms, and indicators are properly documented per the intervention protocol and SLA.
• Track and update incidents and requests based on client updates and analysis results.
• Report infrastructure issues to the IT support team.
• Perform other duties related to the position.

Essential Skills and Qualifications

• Knowledge and hands-on experience in the management of McAfee EDR, CrowdStrike, ENS, DLP, CASB, and other security products.
• Experience with Security Information and Event Management (SIEM) tools like LogRhythm and McAfee, including creation of basic correlation rules and SIEM administration.
• Expertise in TCP/IP network traffic and event log analysis.
• Knowledge of ITIL disciplines such as Incident, Problem, and Change Management.

Expectations

• Experience: 0 - 4 years.
• The SOC Engineer will be responsible for monitoring, reporting, and escalating events to our SOC Manager.
• The primary function of this position is to monitor analytics tools, perform alert management, and initial incident qualification.
• This role reports to the SOC Manager.
• Bachelor’s degree with CEH certification is required.
• Joining time / Notice Period: Immediate joining.
• Shift Timings: Rotational Shifts.
• Location: 100% working from the Bangalore office.

Must-Haves

• SIEM: 4/5
• Networking: 4/5
• ITSM: 3/5

Key Skills/Competency

• SIEM
• Log Analysis
• Incident Response
• Network Security
• Endpoint Security
• ITSM
• ITIL
• Cybersecurity
• McAfee EDR
• CrowdStrike