Vista previa de la oferta
Consultant | Incident Response & Handling | Bengaluru Eco space | Cyber Defense & Resilience | Secur
Consulting
Your work profile.
As a Consultant in our Cyber Team, you’ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations: -
Role Summary
- Monitor and analyze security alerts from SIEM tools (e.g., SecOps,Splunk, QRadar).
- Perform initial triage, prioritization, and escalation of security incidents.
- Identify false positives and escalate legitimate threats to L2.
- Maintain incident tracking and documentation using ticketing systems.
- Ensure compliance with SOC runbooks and standard operating procedures.
- Perform in-depth investigation of escalated security incidents and alerts.
- Conduct root cause analysis, correlate logs across sources, and identify the threat actor's behavior.
- Lead incident response activities and provide recommendations for containment and remediation.
- Develop and tune use cases, detection rules, and correlation logic in SIEM platforms.
- Work closely with other teams for threat containment and post-incident reporting.
- Mentor L1 analysts and support their technical development.
Required Skills
- Hands-on experience with SIEM platforms (e.g., Google SecOps, Splunk, QRadar, Microsoft Sentinel).
- Familiarity with EDR tools (e.g., CrowdStrike, MS Defender).
- Knowledge of MITRE ATT&CK, Cyber Kill Chain, and incident response lifecycle.
- Strong understanding of network protocols, Windows/Linux OS logs, and threat vectors.
- Good analytical, communication, and documentation skills.
- Relevant certifications like CEH, CompTIA Security+, Splunk Core Certified, etc., are preferred.
Desired Qualification:
- B.Tech/BE / B.Sc / BCA/ full time graduation / Master’s degree in Computer Science, Engineering/ Bachelor’s degree in Computer Science, IT, Cybersecurity, or equivalent
- 1-2 years of experience in SOC operations (L1).