Job Description

:

Responsibilities

Monitoring of SIEM alerts and creation of SIEM investigations.

Gathering information of Alerts & Incidents and performing Initial Incident Analysis.

o Artifacts Gathering

o Performing OSINT checks.

o User profiling , Device Profiling , IP and Application Profiling etc.

o Documenting all the above in Incident Analysis Template

Post Initial Analysis, escalating the Incident to L2 /L3.

Teams Channel Monitoring.

SOC mail box Monitoring.

Performing Health Daily Checks.

Performing validation and deep dive analysis of the alert.

o Identifying the alert, if its TP / FP. If TP, identifying the root cause.

o Taking necessary remediation actions post analysis and ensuring the action are completed successfully.

o Detailed analysis documentation following the defined template.

o If False Positive and repeating alerts, identifying the root case and finetuning of the use case to reduce the False Detections.

o Helping in creating Incident Report whenever its required.

o Discussing & Explaining the Incidents of Interest on Shift handover calls and Client Calls in detail.

o Identifying any incidents which need immediate attention and escalating to L3/ On-calls for quick actions.

Escalating of potential incidents to L3 according to predefined escalation scenarios.

Supporting the Client Incident Response team during the Incident Response Process.

Performing Daily Shift Handover call with L3.

Working on Automation in SOC operations.

Location

:
India - Bengaluru

Created On

:
03-Sep-2025