Senior SOC Analyst

Job Type Full-time

Description Job Title: Senior SOC Analyst Employment Type: Full-time Work Location: India / Hybrid Department: CISO

About The Job We have a new opening for a Senior SOC Analyst to join our team. This is not a traditional SOC role. Instead of spending your entire day triaging alerts, you'll mainly work on different cyber security projects such as building detection logic, automating repetitive workflows and partnering closely with GRC and Product Security to improve security telemetry across the CloudBees enterprise and product environment. The role has wide ranging responsibilities for the Information Security department; including undertaking business as usual activities like alert triage, technical incident management, improving threat detections, consuming threat intelligence, assessing cloud risks, vulnerability assessment, and working on various other cyber security projects. Previous experience working in a SOC team is necessary as well as being able to operate SIEM, EDR, DLP, CNAPP, and other core SOC tools. You will join a team of globally dispersed SOC Analysts and must be able to work in a highly dynamic environment. If you are a proactive self-starter that is looking to join a fast-growing team, we would love to hear from you.

What Success Looks Like: Within your first year you'll help CloudBees:

• Increase detection coverage across enterprise and production (cloud) environments.
• Improve automation throughout Security Operations by utilising AI.
• Reduce manual investigation effort.
• Improve incident response efficiency.

What You'll Get:

• Highly competitive benefits and vacation package.
• Ability to work for one of the fastest growing companies with some of the most talented people in the industry.
• Team outings.
• Fun, Hardworking, and Casual Environment.
• Endless Growth Opportunities.

Requirements What you will do:

• Provide security monitoring and incident response of cyber security events in a high availability SaaS cloud environment and enterprise
• Directly or indirectly support internal and external customers
• Monitor and analyze Security Information and Event Management (SIEM) alerts to identify security issues
• Operate security tools like SIEM, EDR, DLP, CNAPP, vulnerability management solutions, and others
• Develop correlation rules to expand our threat detection capability; enrich the rules with threat intelligence
• Perform threat hunting to proactively detect incidents
• Investigate, document, and report on information security issues and emerging trends.

Who you are:

• 3+ years of experience working within a global Security Operations Center (SOC)
• Familiarity with tuning and/or configuring SIEM detection logic
• Knowledge of SOC standard operating procedures and mainstream security solutions
• Ability to analyze endpoint, network, and application logs
• Excellent communication skills with both Security and Engineering teams
• Knowledge of common Internet protocols and applications
• Working knowledge of cloud services (AWS, GCP, or Azure)
• Familiarity with software development environments (DevOps) and SDLC is a plus
• Scripting / SOAR / security automation experience is a plus
• Relevant certifications including GCIH, GCIA, GCDA, GCED or AWS Security Specialty are a plus