Sr Engineer (Support & Operations)

Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · DevOps

In short

HCLTech is seeking a detail-oriented SOC Analyst with 1-3 years of experience to join their Security Operations Center in Noida. The role involves monitoring, triaging, investigating, and responding to security threats using Palo Alto Networks Cortex XSIAM. The ideal candidate will have strong analytical skills and experience with modern threat landscapes.

Responsibilities

Monitor and analyze security alerts, events, and incidents within Palo Alto Cortex XSIAM.
Conduct initial alert triage to differentiate between true positives and false positives.
Perform root cause analysis, risk assessment, and scope determination for security incidents.
Execute containment, mitigation, and remediation actions.
Query and correlate security data using Cortex Query Language (XQL).
Validate and maintain Cortex XDR agent health.
Interact with automated SOAR playbooks.
Leverage Attack Surface Management (ASM) and Identity Threat Detection & Response (ITDR) modules.
Map adversary behaviors to the MITRE ATT&CK framework.
Integrate threat intelligence feeds into detection workflows.
Maintain detailed incident logs and post-incident reports.
Collaborate with IT Infrastructure, Cloud, Engineering, and DevOps teams.

Requirements

1 to 3 years of experience in a Security Operations Center (SOC) or Incident Response environment.
Direct experience using Palo Alto Networks Cortex XSIAM or Cortex XDR.
Palo Alto Networks Certified XSIAM Analyst or PCDRA (Palo Alto Networks Certified Detection and Remediation Analyst) certification preferred.
CompTIA Security+, CySA+, or GIAC (GSEC/GCIH) certifications also preferred.
Understanding of log ingestion, correlation, alert grouping, and playbook execution within XSIAM.
Hands-on ability to write and modify XQL (Cortex Query Language) or similar SIEM query languages.
Solid grasp of TCP/IP, DNS, HTTP/S, VPNs, firewalls, and proxy architecture.
Working knowledge of Windows, Linux, and macOS internal security mechanisms.
Strong understanding of the MITRE ATT&CK framework, Cyber Kill Chain, and common vector entry tactics.
Familiarity with Active Directory, Microsoft Entra ID (Azure AD), SSO, MFA, and general AWS/Azure security concepts.
Basic proficiency in Python or PowerShell for automation and log parsing is a plus.
Strong problem-solving and critical-thinking abilities under pressure.
Excellent verbal and written technical reporting skills.
Ability to work effectively in shift/rotational monitoring operational environments.

Desired Qualifications

Experience with Palo Alto Next-Generation Firewalls (NGFW) or Prisma Cloud integrations.
Experience participating in basic threat hunting or tabletop incident response exercises.
Exposure to forensic artifact collection (memory dumps, PCAP analysis).

Benefits

Supercharge your potential at HCLTech.
Find your career and your spark at HCLTech.
A place that knows that helping its customers stay on top starts by putting its people first.
Work with a global technology company home to over 223,000 people across 60 countries.

Skills

Palo Alto Networks Cortex XSIAMPalo Alto Networks Cortex XDRXQLTCP/IPDNSHTTP/SVPNsFirewallsProxyWindowsLinuxmacOSMITRE ATT&CKCyber Kill ChainActive DirectoryMicrosoft Entra IDAWSAzurePythonPowerShell

#Security Operations Center#SOC#Incident Response#Palo Alto Networks#Cortex XSIAM#Cortex XDR#XQL#SIEM#SOAR#MITRE ATT&CK#Cloud Security#Endpoint Security#Network Security#Identity Security

About HCLTech

Supercharging progress through technology and innovation

HCLTech is a global technology company, home to 219,000+ people across 54 countries, delivering industry-leading capabilities centered around digital, engineering and cloud, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2022 totaled $12.1 billion. To learn how we can supercharge progress for…

See all open jobs at HCLTech Read more about HCLTech Website