HYDERABAD · FULLTIME
SOC Analyst (L1.5)
Zensar Technologies
Hyderabad · onsite · Posted 1d ago
Sourced from
Undisclosed3–6 yrsfulltimeHyderabad
About a minute. You'll make an account on the way through.
agent · working
- Read this posting0.7s
- Found the form on Naukri · 14 questions to answer1.6s
- Decided the answers for all of them2.2s
- Tailor your résumé to this role
- Waiting for you
Section · 01
About this role
Job Summary
We are looking for a SOC Analyst (L1.5) with hands-on experience in Security Operations, Security Monitoring, Incident Response, Threat Hunting, and SIEM technologies. The ideal candidate should have exposure to Logpoint SIEM and strong experience in handling security incidents, alert triage, and threat investigations in a 24x7 SOC environment.
Candidates with strong experience in Microsoft Sentinel, Splunk, QRadar, or ArcSight along with incident response and threat hunting capabilities will also be considered.
Key Responsibilities Security Monitoring & Incident Detection - Monitor and analyze security alerts generated from SIEM and integrated security tools.
- Perform real-time alert triage and validate security incidents.
- Investigate incidents related to malware, phishing, ransomware, insider threats, account compromise, privilege misuse, and unauthorized access.
- Escalate incidents to L2/L3 teams as per defined processes.
- Ensure adherence to incident response SLAs and SOC procedures.
- Perform incident investigation and root cause analysis.
- Analyze logs from:
- Windows Servers & Workstations
- Linux Systems
- Active Directory
- Firewalls
- IDS/IPS
- EDR/XDR Solutions
- Proxy & Email Security Platforms
- Cloud Platforms (Azure, AWS, GCP)
- Support containment, eradication, recovery, and remediation activities.
- Document incidents, findings, and recommendations.
- Perform proactive threat hunting activities.
- Utilize MITRE ATT&CK Framework for threat mapping and analysis.
- Analyze Indicators of Compromise (IOC) and Indicators of Attack (IOA).
- Correlate threat intelligence with internal security events.
- Identify suspicious user and system behavior.
- Monitor and manage Logpoint SIEM use cases and alerts.
- Support correlation rule tuning and alert optimization.
- Create and maintain dashboards, reports, and custom searches.
- Validate log ingestion and monitor SIEM health.
- Reduce false positives through continuous tuning activities.
- Logpoint SIEM (Preferred)
- Microsoft Sentinel
- Splunk
- IBM QRadar
- ArcSight
- Microsoft Defender
- CrowdStrike
- SentinelOne
- Palo Alto
- Fortinet
- Check Point
- Cisco Security Solutions
- IDS/IPS
- Email Security Solutions
- Security Monitoring
- Incident Response
- Alert Triage
- Incident Investigation
- Threat Hunting
- Threat Intelligence
- Malware Analysis
- Phishing Investigation
- Event Correlation
- Root Cause Analysis
- Windows Administration
- Linux Administration
- TCP/IP
- DNS
- DHCP
- VPN
- HTTP/HTTPS
- SMTP
- Network Security Concepts
- MITRE ATT&CK
- Cyber Kill Chain
- NIST Incident Response Lifecycle
- Threat Intelligence Concepts
- Bachelors Degree in Computer Science, Information Technology, Cyber Security, or related field.
- 3+ years of SOC Operations experience.
- Experience working in a 24x7 SOC environment.
- Strong analytical and troubleshooting skills.
- Good verbal and written communication skills.
- SC-200 (Microsoft Security Operations Analyst)
- CEH
- CompTIA Security+
- Logpoint Certified Analyst
- Splunk Certifications
- 3-6 years of SOC experience.
- Hands-on exposure to Logpoint SIEM is highly desirable.
- Strong experience with Microsoft Sentinel, Splunk, QRadar, or ArcSight.
- Experience in Incident Response, Alert Triage, Threat Hunting, Security Monitoring, and Threat Intelligence.
- Exposure to CrowdStrike, Defender, SentinelOne, Palo Alto, or Fortinet.
- Willingness to work from Hyderabad in 24x7 rotational shifts.
- Bachelors Degree in Computer Science, Information Technology, Cyber Security, or related field.
- 3+ years of SOC Operations experience.
- Experience working in a 24x7 SOC environment.
- Strong analytical and troubleshooting skills.
- Good verbal and written communication skills.
- SC-200 (Microsoft Security Operations Analyst)
- CEH
- CompTIA Security+
- Logpoint Certified Analyst
- Splunk Certifications
- Monitor and analyze security alerts generated from SIEM and integrated security tools.
- Perform real-time alert triage and validate security incidents.
- Investigate incidents related to malware, phishing, ransomware, insider threats, account compromise, privilege misuse, and unauthorized access.
- Escalate incidents to L2/L3 teams as per defined processes.
- Ensure adherence to incident response SLAs and SOC procedures.
- Perform incident investigation and root cause analysis.
- Analyze logs from:
- Windows Servers & Workstations
- Linux Systems
- Active Directory
- Firewalls
- IDS/IPS
- EDR/XDR Solutions
- Proxy & Email Security Platforms
- Cloud Platforms (Azure, AWS, GCP)
- Support containment, eradication, recovery, and remediation activities.
- Document incidents, findings, and recommendations.
- Perform proactive threat hunting activities.
- Utilize MITRE ATT&CK Framework for threat mapping and analysis.
- Analyze Indicators of Compromise (IOC) and Indicators of Attack (IOA).
- Correlate threat intelligence with internal security events.
- Identify suspicious user and system behavior.
- Monitor and manage Logpoint SIEM use cases and alerts.
- Support correlation rule tuning and alert optimization.
- Create and maintain dashboards, reports, and custom searches.
- Validate log ingestion and monitor SIEM health.
- Reduce false positives through continuous tuning activities.
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Section · 02
Skills
CyberDNSActive Directorycloud platformsfirewallsgoogle cloud platformamazon web servicesarcsightcehFortinetEmail SecurityQradarcorrelationCrowdstrikeCompTIA SecurityCompTIAcloudCommunication SkillsAdministrationCiscoMicrosoft Azure
Section · Company
About Zensar Technologies
Zensar Technologies
IT Services & Consulting
10.0k+
employees
2001
25 years old
Pune, Maharashtra
India
About
Zensar is a global organization that conceptualizes, builds, and manages digital products through experience design, data engineering, and advanced analytics for leading companies.
Industries
IT Services & Consulting
Employee ratings
2,994 reviews
3.7/ 5
Culture
3.5
Career growth
3.0
Work-life
3.8
Employees rate it well for
Work Life Balance442Work Culture366Senior Management300Salary295Job Security229
Find them on