SOC L3-Incident Response

Act as the final escalation point for complex security incidents and alerts. Perform deep-dive analysis of security events using SIEM, EDR, and other security tools. Lead incident response efforts, including containment, eradication, and recovery. Conduct threat hunting to proactively detect and mitigate threats. Develop and maintain playbooks and procedures for incident handling. Mentor and guide SOC L1 and L2 analysts. Work with threat intelligence teams to correlate global threats with local events. Support forensic investigations, root cause analysis, and post-incident reviews. Evaluate and recommend enhancements to SOC processes and tools. Assist with tuning of detection systems to reduce false positives.

Responsibilities-

• Any Graduate with 5-8 years’ experience of working in IT Security.
• Good Knowledge of Incident Management.
• Experience in working High Severity Complex Cyber Security Incidents that involved multiple Business Functions and Technology Teams.
• Good Data Analysis and Presentation skills.
• Good Communication skills.
• Good understanding of MITRE ATT&CK Framework

Beneficial:

• Good Documentation skills
• Good at Incident Management.

Personal Characteristics:

• Strong communication skills, ability to work comfortably with different regions
• Actively participate within internal project community
• Good team player, ability to work on a local, regional and global basis and as part of joint cross location initiative.
• Self-motivated, able to work independently and with a team
• Able to perform under pressure.