Security Operations Center Analyst

Insight Global is looking for a Senior SOC Analyst for one of our major retail apparel clients based out of North America. They will be joining a SOC team to support their 24X7 operations out of their India Tech Hub in Bengaluru. This would be a long-term contract role with potential for full time conversion sitting 2 days on site in their Bengaluru office. The working hours would be 9AM-5PM IST.

• The Cyber Security Senior Analyst will help the team to perform Security Operations Center (SOC) duties, which include incident response, malware analysis, and monitoring. This role will work with the team and become our technical leader to implement and apply technologies, processes, and practices designed to protect networks, devices, and data from malicious attack, damage, or unauthorized access.
• Conduct threat analysis, assessment, and malware triage in support of security investigations and incident response process
• Provide technical leadership and coaching to security operations personnel
• Aid in the creation of a scalable, holistic Triage and Analysis program
• Recognize and research attacker tools, tactics, and procedures (TTP) in indicators of compromise (IOCs) that can be applied to current and future investigations
• Build internal scripts, tools and automation processes to enhance detection and response capabilities
• Collaborates with technical and business teams to drive SOC initiatives acting as the SME

Must Haves:

• Bachelor’s Degree in Computer Science or Computer Crime Investigations preferred
• 5+ years of demonstrated experience in computer security- related disciplines such as incident repones, host forensics, malware analysis, network traffic analysis, Insider Threat, alerts tuning and trend analysis
• Understanding of security threats, vulnerabilities, controls and remediation strategies in customer data environments
• Cloud Security Knowledge in AWS and Azure
• Strong security concepts of threat categories (such as malware, phishing attacks, Defense-inDepth, MITRE ATT&CK framework, etc.)
• Extensive experience working with security tools such as SIEM, EDR, firewalls, IDS/IPS, antispam, content management, server and network device hardening, etc.
• Strong knowledge of Windows, Linux and/or Mac OS and comfortable with looking at, understanding, and investigating Security Event logs.
• Experience with query languages and scripting languages
• Experience in using security orchestration, automation, and response tools
• Azure Sentinel

*** This role pays up to 17 LPA