Security Operations Center Analyst Jobs in Gurgaon - Tower Research Capital

Security Operations Center Analyst

Tower Research Capital

0 to 3 Years

Not disclosed

Expired

Posted: 14 Jun 21

Job Description

Responsibilities

Monitor alerts for potential security incidents and requests for information. This includes, but not limited to monitoring of real-time channels, tools, dashboards, periodic reports, chat sessions, and tickets.

Follows incident-specific procedures to perform basic triage of said potential security incidents to determine their nature and priority and eliminate obvious false positives and process requests for information.

Escalate Potential security incidents to senior analysts and implement countermeasures/mitigating controls.

Serve as a subject matter expert in at least one security-related area (e.g. Malware re-engineering, Cloud Security, Phishing, Deception etc)

Coordinate with stakeholders with supporting third party security service providers to triage alerts, events or incidents.

Monitor and analyze Security Information and Event Management (SIEM) to identify security issues for remediation.

Knowledge of creating Security Information Event Management (SIEM) policy rulesets.-Recognize potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information.

Interface with a variety of customers in a polite, positive, and professional manner.

Documents all actions taken in a ticketing system

Requirements

Total industry experience of 3-6 Years with a minimum of three years in the Information Security / Cybersecurity domain with a focus on security event monitoring and analysis.
BE in Computer Science / Information Security / Information Technology
Proven track record and experience of the following in a highly complex and global organization:
Analysing detected security events
Performing triage of potential security incidents
Certifications: Professional security management certification preferred, such as Certified Intrusion Analyst (GIAC), Continuous Monitoring (GMON), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH).
Experience with the technologies including, but not limited to SIEM, IDS/IPS, Network/Host based firewalls, data leakage prevention (DLP).
Understanding of possible attack activities such as network probing/ scanning, DDOS, malicious code activity, etc.
Experience scripting in a major language (python/bash/powershell)

Experience And Other Requirements

Willing to work on any of three shifts to offer 24 hours support service.
Understanding of common network devices such as routers, switches.
Understanding of basic networking protocols such as IP, DNS, HTTP.
Excellent written and verbal communication skills, interpersonal and collaborative skills.
Strong analytical and problem-solving skills.
Self-motivated to improve knowledge and skills.
A strong desire to understand the what / why / how of security incidents.

Benefits