SOC Analyst

Technical skill set

• Must have good understanding and extensive hands‑on experience on various security technologies for e.g. Firewalls, VPN's, IDS/IPS, end‑point security solutions (AV, HIPS, Hard Disk Encryption), Cloud Web Security solutions, Strong Authentication solutions, Mail Security Gateways, advanced persistent threat (APT) protection solution, PKI etc.
• Must possess sound knowledge of SIEM solutions like IBM QRadar / RSA Net Witness Suite and Log Management Solutions.
• Should have strong analytical skills.
• Should have good understanding about Public Cloud solutions and security relevant to infrastructure setup in public cloud environment (Azure/AWS/Google/IBM etc.).
• Must be well versed with Security Incident Management process, should have good understanding about the security forensic investigations process.
• Should understand customer's technical requirements and transform those in to a technical solution.

• Shall have good verbal/written communication skills, and comfortable in working with customer managers (both technical and senior program level).
• Should have good presentation skills – shall be able to participate the review meetings and be able put across the points of concerns.
• Should have capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams.
• Should keep updated himself/herself about new trends/solutions.
• Should have thorough understanding about best practices being followed in the industry.

• Understand and get well‑versed with customer specific environment/processes‑procedures.
• Frontend the Integrated Security Operation Centre (ISOC) team based in Bangalore.
• Provide analysis and trending of security log data from a large number of heterogeneous security devices.
• Participate in Incident Response (IR) support when analysis confirms actionable incident.
• Provide threat and vulnerability analysis as well as security advisory services.
• Provide analysis and trending of security log data from a large number of heterogeneous security devices.
• Provide Incident Response (IR) support when analysis confirms actionable incident.
• Provide threat and vulnerability analysis as well as security advisory services.
• Analyse and respond to software and hardware vulnerabilities.
• Investigate, document, and report on information security issues and emerging trends.
• Perform regular (Daily/Weekly/Fortnightly/Monthly) operations reviews internally and with customer.
• Supporting proposed solution design with business case/business justification/ROI figures.
• Work with Customer to understand customer requirements and provide probable solution in discussion with HCL Security Practice team.
• Preparing Project Solution Documents or Technical Proposals.
• Manage high-performance of the self and the team.
• Maintain and manage the issues/risks.
• Technical Documentation – review and update - Technical Design Document, Risk Matrix, Post Installation Document, Run-books.