SOC Analysts L2 — 12-month Contract

1. SOC Analyst - L2:

Qualifications & Experience:

Essential:

· BE/ B.Tech/ M.Tech qualification in IT/IS/CS/E&C

· Minimum of 6 years of experience in Cyber security, SOC or relevant discipline .M.Tech. is considered as one year experience.

· Hands on Experience in Open Source tools as well as Commercial tools SIEM, SOAR, UEBA, NDR etc

· At least one of the following certifications–GCFA/GCFI/CISP/CISSP/CCNP/CEH or M.Tech. in Cyber security.

· Proficient in Incident Management and Response, SIEM Log Knowledge, Web Application/Malware Attacks, Security Monitoring.

· Perform analysis on reported security incidents and determine root cause. Monitor and review L1 activities. Triage incidents based on threat matrix. Knowledge in integrating various log sources with SIEM. Basic knowledge of open source security tools (ELK).

· Perform Network Operations Support, Firewall/Security Device Administration, VPN/Remote Access Support, Security Monitoring & Incident Handling.

· Handle escalated network issues from L1. Add/modify firewall rules under change management. Configure and troubleshoot user VPNs. Apply firmware/software updates to network and security devices. Perform configuration management and support audits.

· In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management, threat hunting, threat intelligence.

· Provide analysis and trending of security log data from a large number of heterogeneous security devices

· Knowledge of TCP/IP Protocols, network analysis, and network/security applications;

· Hands on experience on security devices and their management like NGFW, WAF

· Investigate, document, and report on information security issues and emerging trends

· Experience in Vulnerability Assessments

· Experience with configuration of debug, event generation and logging functionality within application and operating systems, using Syslog or flat file generation

· Hands on experience on using tools – SIEM, SSL, Packet Analysis, HIPS/NIPS, Network Monitoring tools, Remedy, SOAR, Web Security, AV, UBEA, Advanced SOC, EDR.

Desirable:

· Analyze and respond to previously undisclosed software and hardware vulnerabilities

· Knowledge of common Internet protocols and applications

· OEM certifications for the technology required for the role.