Description
**Job Title: Security Operations Center (SOC) Engineer**
**Job Description:**
We are currently seeking a talented and motivated Security Operations Center (SOC) Engineer to join our dedicated cybersecurity team. As a SOC Engineer, you will be responsible for monitoring and responding to security alerts, analyzing security incidents, and ensuring the overall security of our organization's information systems and data. You will play a critical role in maintaining a secure and resilient cybersecurity posture, detecting and mitigating potential threats in real-time. If you are passionate about cybersecurity, possess a strong technical background, and thrive in a fast-paced environment, we invite you to apply for this exciting opportunity.
**Roles and Responsibilities:**
1. **Security Monitoring:** Monitor security alerts and events generated by various security tools and systems, such as SIEM, IDS/IPS, firewalls, and antivirus, to detect potential security incidents.
2. **Incident Detection and Response:** Investigate and analyze security incidents promptly to determine the nature and scope of the threat. Initiate appropriate incident response measures for containment and eradication.
3. **Threat Hunting:** Proactively search for signs of advanced threats and suspicious activities within the organization's network and systems. Perform in-depth analysis and research on security events to identify potential indicators of compromise.
4. **Vulnerability Management:** Assist in vulnerability scanning and assessment processes to identify and prioritize potential security vulnerabilities. Collaborate with other teams to ensure timely remediation.
5. **Security Tool Management:** Maintain and configure security tools and technologies deployed in the SOC, ensuring they are up-to-date and effectively operational.
6. **SIEM Management:** Manage and fine-tune the organization's SIEM platform, including creating custom dashboards, correlation rules, and log source integration.
7. **Threat Intelligence Utilization:** Utilize threat intelligence feeds and sources to enhance the SOC's ability to detect and respond to emerging threats.
8. **Documentation:** Maintain detailed records of security incidents, investigations, and response activities. Document standard operating procedures and best practices for the SOC.
9. **Collaboration:** Work closely with other cybersecurity teams, such as incident response, threat intelligence, and IT teams, to share information, coordinate response efforts, and conduct joint security initiatives.
10. **Reporting:** Prepare and present regular security reports, incident analysis, and trends to management and stakeholders.
11. **Continuous Improvement:** Continuously enhance SOC processes, procedures, and technologies to improve overall security posture and operational efficiency.
12. **Training and Awareness:** Conduct security awareness training for employees to educate them about cybersecurity best practices and potential threats.
13. **Compliance and Governance:** Ensure the organization's SOC operations align with relevant industry regulations, compliance standards, and data protection requirements.
14. **Incident Coordination:** In case of significant incidents, coordinate with external entities, such as law enforcement agencies or incident response teams, as necessary.
**Qualifications and Experience:**
- Bachelor's degree in Computer Science, Cybersecurity, or a related field. Relevant certifications like CompTIA Security+, CISSP, or GIAC are desirable.
- Proven experience working in a Security Operations Center (SOC) or a similar cybersecurity role.
- Solid understanding of cybersecurity principles, tools, and technologies.
- Experience with SIEM platforms, intrusion detection/prevention systems, and other security tools.
- Strong analytical and problem-solving skills to investigate security incidents effectively.
- Excellent communication and teamwork skills to collaborate with various stakeholders.
- Ability to work under pressure, handle incidents, and respond to security events in a timely manner.
- Familiarity with security frameworks and compliance standards (e.g., NIST, ISO 27001) is advantageous.
- Continuous learning mindset to stay updated with the latest cybersecurity trends and threats.
Join our SOC team and play a crucial role in safeguarding our organization against cybersecurity threats. Be a part of our mission to maintain a secure and resilient digital environment. Apply now and make a significant impact on our cybersecurity efforts!
: India
Experience Required (In Years): Minimum- 5 Maximum- 8