Sr Analyst

Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity

In short

The Security Operations Center (SOC) Analyst - L1 is responsible for 24x7 security monitoring, event analysis, incident triage, and initial response activities. This role involves monitoring security alerts, identifying threats, performing preliminary investigations, and escalating confirmed incidents. Experience with SIEM monitoring and incident handling is preferred, though freshers with cybersecurity certifications may be considered.

Responsibilities

Monitor security alerts and events from SIEM, EDR, IDS/IPS, Firewall, Proxy, and Cloud Security solutions.
Perform initial triage and analysis of security incidents.
Investigate suspicious activities and determine potential impact.
Escalate high-severity incidents to L2/L3 SOC teams based on defined escalation procedures.
Document security incidents, findings, and actions taken in ticketing systems.
Monitor security dashboards and ensure timely alert handling as per SLA.
Support incident response activities during security events.
Conduct log analysis from various security devices and systems.
Identify false positives and reduce alert fatigue through proper analysis.
Maintain incident records, playbooks, and operational documentation.
Participate in shift handovers and provide detailed incident updates.
Follow security policies, procedures, and compliance requirements.

Requirements

1 to 3 years of experience in SOC, Security Operations, Cyber Security, or IT Operations.
Experience with SIEM monitoring and incident handling is preferred.
Freshers with cybersecurity certifications may also be considered.
Splunk Enterprise Security
OT/Security
Armis
Qualys
ServiceNow or equivalent ITSM platform
Incident Management Processes
Basic Threat Intelligence concepts

Benefits

Supercharge your potential.
Find your career.
Find your spark.
A place that knows that helping its customers stay on top starts by putting its people first.

Skills

Splunk Enterprise SecurityOT/SecurityArmisQualysSIEMEDRIDS/IPSFirewallProxyCloud SecurityServiceNowThreat Intelligence

#Security#SOC#Cyber Security#Managed Services#SIEM

About HCLTech

Supercharging progress through technology and innovation

HCLTech is a global technology company, home to 219,000+ people across 54 countries, delivering industry-leading capabilities centered around digital, engineering and cloud, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2022 totaled $12.1 billion. To learn how we can supercharge progress for…

See all open jobs at HCLTech Read more about HCLTech Website