Greetings from Netsach - A CyberSecurity company is hiring for the below position.

Position Details – L2 SOC Security Analyst

As part of its overall expansion, Client is ramping up the Security Operations Center and is looking for smart, dynamic, passionate and seasoned professionals with a go getter attitude & client        facing experience to extend the L2 incident response team. The member working in L2 SOC team operates security monitoring solutions, reacting timely to security events as identified. The role requires working in shift schedule (to cover 24/7) after the initial ramp up period.

Job Title – L2 SOC Analyst Cybersecurity Operation

Location – Hyderabad

Experience – 5 - 7 years (relevant should be min 4yrs in SOC L2)

Desired Qualification – B.Sc CSC / B.Tech or BE Computers / MCA. Certifications from CISSP, CEH, GCIA, CCNA, OSCP, OSCE is a plus.

Employment Type – Full Time

Job Responsibilities

·        Excellent knowledge on Cyber Incident Analysis.

·        Expertise on Vulnerability Assessment, Penetration Testing & Forensic Analysis.

·        Deep analysis of Security Events / Incidents communicated by L1 and other L2 members.

·        Handle Critical & High Severity incidents / issues on priority & provide a fix along Root Cause Analysis.

·        Correlates threat intelligence to identify the threat actor, nature of the attack, and systems or data affected.

·        Defines and executes on strategy for containment, remediation, and recovery.

·        Manages and configures security monitoring tools – advanced.

·        Prioritizes and triages alerts or issues to determine whether a real security incident is taking place.

·        Actively hunts for threats that have made their way into the network, as well as unknown vulnerabilities and security gaps.

·        Use Case Management, Rules Tuning, Offensive Report Validation.

·        Validate reporting activities & present the same to corresponding clients.

·        Proficient in handling client escalations & incident response activities.

·        Interact with external parties to resolve the queries relating to incidents raised.

·        Train L1/L2 via planned knowledge transfer & internal training sessions.

Job Requirements

·        Minimum 4 years’ experience working in a large-scale IT environment with focus on Cyber / Information Security.

·        Strong Knowledge on Network security (Firewalls, Proxies, IDS/IPS, Vulnerability Scanner).

·        Seasoned in advanced forensics, malware assessment, threat intelligence,

·        4+ years of experience in handling at least 4 to 6 SOC tools viz., email security (like Proof Point), SIEM (like Trellix, QRadar), honeypot (like TrapX), data loss prevention (like Digital Gaurdian), proxy, end point detection & response (like Crowd Strike), vulnerability management (like Rapid7), multi factor authentication (like Duo Console), firewall (like Palo Alto), intrusion detection system (like Deep Discovery Inspector).

·        Experience of network-based User Behavior Analytics (like Dark Trace, ArcSight).

·        Experience of packet-capture tools and analysis of packet flows (like Wireshark).

·        Experience working with service providers and network management platforms.

·        Customer-facing, with good report-writing skills and strong communication skills at all levels.

·        Ability to provide technical and service leadership to L1 and other L2 analysts. Be a thought leader in the SOC.

·        Knowledge of Security Best Practices and Concepts.

·        Critical thinking and problem-solving abilities.

·        Capability to communicate and listen to needs from organizational or client stakeholders.

·        Well-developed logical thinking capabilities, in order to be able to investigate cases.

·        Reliability and overall good communication skills – both verbal and written.

·        Able to work in shift schedule.

·        Good interpersonal skills – clear communication, attentive & careful listening, empathetic behavior, being positive, supporting useful ideas & honest efforts of colleagues, being positive.

Nice to Have

·        Ethical hacker certification or training is a major advantage.