Sr Security Analyst - L2 (SOC)
SHI · Hyderabad · onsite · Posted 2d ago
About a minute. You'll make an account on the way through.
About this role
Sr Security Analyst
Level : L2
Exp: 4+yrs
Location: Hyderabad.
JD:
- Tier 2 Security Analyst addresses real security incidents.
- Evaluates incidents identified by tier 1 analysts.
- Responsible for conducting information security investigations as a result of security incidents identified by the Level 1 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone)
- Uses threat intelligence such as updated rules and Indicators of Compromise (IOCs) to pinpoint affected systems and the extent of the attack.
- Analyzes running processes and configs on affected systems.
- Carries out in-depth threat intelligence analysis to find the perpetrator, the type of attack, and the data or systems impacted. Creates and implements a strategy for containment and recovery.
- Act as a point of escalation for Level-1 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques.
- Should have experience in Developing new correlation rules & Parser writing
- Experience in Log source integration
- Act as the lead coordinator to individual information security incidents.
- Document incidents from initial detection through final resolution.
- Participate in security incident management and vulnerability management processes.
- Coordinate with IT teams on escalations, tracking, performance issues, and outages.
- Communicate effectively with customers, teammates, and management.
- Prepare Monthly Executive Summary Reports for managed clients and continuously improve their content and presentation.
- Provide recommendations in tuning and optimization of security systems, SOC security process, procedures and policies.
- Define, create and maintain SIEM correlation rules, customer build documents, security process and procedures.
- Follow ITIL practices regarding incident, problem and change management.
- Staying up to date with emerging security threats including applicable regulatory security requirements.
- Maintain an inventory of the procedures used by the SOC and regularly evaluate the SOC procedures and add, remove, and update the procedures as appropriate
- Publish weekly reports to applicable teams.
- Generate monthly reports on SOC activity.
- Should be skilled on Deception Technology, EPP, EDR, IPS/IDS desirable.
- Required flexibility to work in a 24x7 environment.
Share the CV to [email removed]
Sourced from naukri
Skills
About SHI
SHI
Hyderabad
IN
About
SHI | Locuz; part of the SHI group of companies, is a Security led digital transformation company with its Innovation & Engineering headquarters in Hyderabad, India. We are a Security led digital transformation partner with our Innovation & Engineering hubs in Hyderabad, India. Our lineage has been building some of the largest and most complex systems across the globe which were not just technology projects but touched people. Be it setting up complete infrastructure for the Moon Mission or building a Tsunami warning system or be it one of the largest Axle Manufacturer and their 800+ workloads moved to the cloud, we have dealt with business problems of different scales. Cyber Security has been a big part of solving these problems and hence it became part of our DNA and is fundamental to all our solutions.
We believe that a modern organization needs to leverage the new toolbox which constitutes of Automation, AI, ML, Analytics, Data, Cloud and DevOps. Security is fundamental to all of those tools and is the underpinning of every solution. We have continuously focused on building assets which reduce the time to market and enable Innovation.
Our platforms like ClouTor and GANANA are pushing the envelope when it comes to CloudOps, Data & Virtualization and High-Performance Computing.
Locuz is focused on
1.CloudOps our AI/ML power platform for 360 degree Cloud Operations, from Visibility to Economics.
2.SecOps Highly mature processes, tools and standards with Zero Trust as the foundation, our customers mean-time-to-detection is reduced to half, delivering SaaS or on-prem MDR capabilities. (SIEM/SOAR)
3.HPCOps As established leaders in the industry for the past 20 years, we offer comprehensive solutions of High Performance Computing, high performance storage and application parallelization.
4.AIOps A business-centric approach to Managed Services, enabling our customers to harness the power of Intelligent Automation and Processes disrupting MTTR averages, leading to upwards of 40% savings.
5.Insight as a service A business centric data service, which targets to deliver insights to business teams from their data.
Locuz is in the forefront in delivering exceptional value to its customers by continuously innovating, automating and modernizing their environments.
About SHI: SHI International Corp. is a global leader in technology solutions, serving a diverse set of customers with software, hardware, and services that tackle their IT challenges. Based in Somerset, New Jersey, SHI provides tailored IT solutions to corporate, enterprise, public sector, and education clients. With a workforce exceeding 6,000 employees worldwide, SHI is dedicated to fostering long-term success for its customers.
Industries
Employee ratings
16 reviews
Culture
2.9
Career growth
2.9
Work-life
3.4
Find them on