Senior Administrator - Security Investigations, SIEM

Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity

In short

As a CyberSecurity Analyst specializing in Security Investigations and SIEM, you will be responsible for identifying and responding to threats against data and systems. This role involves 24x7 operations, detection, assessment, and response to global security threats using leading technology and processes.

Responsibilities

Provide primary triage, analysis, and operational support for security events and alerts.
Perform correlation using security analytics tools, log aggregators, advanced network malware protection, data indicator mining tools, forensics tools, and threat intelligence repositories.
Conduct real-time incident handling including intrusion correlation, threat analysis, and system remediation.
Analyze the nature of attacks and perform root cause analysis of incidents.
Proactively monitor external data sources for potential security impacts on the enterprise.
Document and publish incident findings, techniques, guidance, and reports.
Participate in improvement tasks such as false positive reduction and use case refinement.
Communicate updates on alerts and incidents verbally and in writing.

Requirements

4+ years of experience as a SOC Analyst, preferably for an enterprise with over 5000 employees.
Experience working with a geographically diverse team across multiple time zones.
Strong communication skills adaptable to various audiences, from SMEs to executives.
Deep understanding of MITRE ATT&CK, with experience building detection cases and playbooks.
Proficient technical writing skills for documenting processes and procedures.
Ability to solve problems and work through ambiguity and uncertainty.
Proficiency with one or more DLP platforms.
Extensive experience with technologies like IDS/IPS, NGFW, EDR, SIEM, HIDS/HIPS, AV, and Vulnerability Scanners.
Expert-level and continually expanding understanding of common and emerging security threats and vulnerabilities.
Self-motivated with a proven ability to deliver end-to-end solutions in a fast-paced industry.
Experience with infrastructure operations and IT service management processes in an enterprise-level organization.

Desired Qualifications

Industry security certifications such as C|EH and relevant GIAC certifications or equivalent are highly desirable.

Benefits

Supercharge your potential at HCLTech.
Find your career and spark at a company that puts people first.
Work for a global technology company with over 230,000 employees in 60 countries.
Deliver industry-leading capabilities in digital, engineering, cloud, and AI.
Work with clients across major verticals including Financial Services, Manufacturing, Life Sciences & Healthcare, Technology & Services, Telecom & Media, Retail & CPG, and Public Services.

Skills

MITRE ATT&CKDLPIDS/IPSNGFWEDRSIEMHIDS/HIPSAVVulnerability ScannersIT service management

#CyberSecurity#SIEM#SOC#Incident Response

About HCLTech

Supercharging progress through technology and innovation

HCLTech is a global technology company, home to 219,000+ people across 54 countries, delivering industry-leading capabilities centered around digital, engineering and cloud, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2022 totaled $12.1 billion. To learn how we can supercharge progress for…

See all open jobs at HCLTech Read more about HCLTech Website