Security Operations Center Analyst jobs in Bangalore at Alphaserve Technologies®

SOC Analyst

Job Description

Alphaserve Technologies® is a global provider of digital IT services to law firms, financial firms and other markets including media, government and health care. A privately held firm of technology and business professionals serving clients in 300 cities and 38 countries, Alphaserve offers services focused on emerging digital technologies (AI, machine learning, automation, application development and security) as well as infrastructure technologies (cloud and lights-on smartsourcing).

SOC Analyst will participate in operation that supports monitoring and is directly responsible for responding to security events. He will provide a technical escalation point during Security Incidents, establishing extent of threat, business impacts and then advising and performing the most suitable course of action to contain and remedy the incident. SOC Analyst will maintain a good knowledge of the threat landscape, helps enhance current techniques and provides support in the identification of new methods of detecting threats. He will perform detailed analysis of security events, using analytical skills and advanced knowledge of IT security and network threats.

He/She should have 0-1 year of relevant experience in SIEM tools and technologies, understanding in ITIL process including incident response and triage. Strong communication skills.

Job Responsibilities

Will work on SOC monitoring and incident response using any of the SIEM tools like ArcSight, Logrhythm, Rapid7 IDR, Qradar, Splunk, ELK
Analyst will monitor network security events and take appropriate action based on security policy, also assist with security related issues.
Responsible for troubleshooting security device related issues.
Reviewing reports to ensure quality and accuracy
Will be responsible to perform analysis of log files, forensic analysis of system resource access.
Responsible for performing analysis of security logs in an attempt to detect unauthorized behavior.
Responsible for taking action on alerts, events, and incidents.
Triage malware incidents, their priority and the need for escalation.
Monitoring for emerging threat patterns and vulnerabilities
Assists with patching recommendations and workarounds for zero-day threats
Coordinates with other external stakeholders and vendors.
Communicates with management on incident updates
Able to run down an incident from start to finish without higher level supervision

Job Requirements

Good analytical skills and triage
Good understanding in ITIL processes
CCNA / Security+/ Network+ CEH certified / SIEM technology certified (optional) (ArcSight, Qradar, Splunk, McAfee Nitro).
Will have good understanding of common network services (web, mail, FTP, etc.),network vulnerabilities, and network attack patterns.

Preferred Experience/Skills