Company: Reward360
Location: Bengaluru, India (WFO)
Category: Managed Detection And Response
Experience: 3 to 4 Years
About Reward360
Reward360 is India's premier loyalty rewards and e-commerce platform manager, delivering cutting-edge transaction and engagement solutions to global banks, brands, and enterprise clients. As we scale our ecosystem to process millions of transactions securely, we are expanding our cybersecurity defense. We are seeking a proactive and technically proficient SOC Analyst (L2) to join our Security Operations Center and safeguard our digital infrastructure against emerging cyber threats, fraud vectors, and account takeovers.
Core Responsibilities
- Incident Triage & Response: Validate, investigate, and escalate critical security alerts. Correlate data across complex enterprise infrastructures, cloud environments, and transactional applications.
- Log & Metric Monitoring: Provide continuous analysis and trending of security log data from heterogeneous infrastructure components including SIEM, firewalls, and cloud access proxies.
- Threat & Vulnerability Management: Conduct deep-dive analysis of threat vectors and active indicators of compromise (IoCs). Respond effectively to zero-day vulnerabilities.
- Security Content Creation: Construct SIEM content (e.g., active filters, custom correlation rules, dashboards, and situational alerts) to enhance detection mechanisms.
- Collaborative Investigation: Investigate, document, and report on emerging threat trends. Partner with Tier-1 analysts, engineering teams, and threat intelligence groups to ensure swift containment.
- 24x7 Operations: Operate effectively within a 24x7 rotating Security Operations Centre (SOC) shift environment to maintain uninterrupted organizational security posture.
Technical Qualifications & Skills
Education & Professional Certifications
- Degree: BE / B.Tech / M.Tech / MSc / MCA qualification in Computer Science, Information Technology, Cyber Security, or an equivalent field.
- Certifications (At least one preferred): CEH, CISSP, GCFE, GCFA, CCNP Security, CCIE Security, or equivalent cybersecurity credentials.
Required Domain Experience
- Cybersecurity Focus: Minimum 3 years of overall cybersecurity experience, with at least 2 years dedicated exclusively to a fast-paced SOC environment.
- Tools Expertise: Proficiency with industry-standard SIEM platforms (e.g., Crowdstrike, SentinleOne, Wazuh,ELK Stack ) alongside core tools like HIPS/NIPS, Packet Analysis (Wireshark), Endpoint Detection and Response (EDR), and Web Application Firewalls (WAF).
- Ticketing & Workflows: Practical exposure to enterprise ticketing suites such as ServiceNow or Remedy for incident lifestyle tracking.
- Networking Foundations: Comprehensive understanding of TCP/IP protocols, subnetting, application layers, and basic network monitoring.
- OS Flavors: Solid diagnostic exposure to various OS architectures, specifically Windows Server ecosystem, Linux distributions, and Unix-based systems.
- Scripting: Basic hands-on automation or analysis scripting capability using languages like Python, bash,or Go.
Soft Skills & Workplace Attributes
- Communication: Strong verbal and written communication skills with the capability to draft crisp, analytical visual threat summaries and technical incident response briefs for diverse engineering stakeholders.
- Problem-Solving: An analytical mindset focused on dissecting attack methodologies, finding root causes, and formulating defensive strategies.
