SOC-Engineer
About the job
Job Description
This role requires a SOC Engineer with 1-3 years of experience in building and operating security controls in domains like network/perimeter security, enterprise endpoint security, DLP, and IAM. Expertise in SIEM, endpoint security, incident handling, and DLP is essential.
Must have:
- SIEM Management
- Endpoint Security
- Incident Handling
- DLP Solutions
Good to have:
- Security Certifications
- Industry Standards
- ITIL Practices
- Cloud IaaS
Not hearing back from companies?
Unlock the secrets to a successful job application and accelerate your journey to your next opportunity.
About the job
Job Description:
Provide tier two operational support, leading team efforts in resolution of incidents and outages for information security technology and its dependencies on Public and Private Cloud computing environments, shared platforms, and operating systems for more than three of the following technologies:
Ensuring team's adherence to SOPs, training and performance monitoring for team members, and continuous process improvement for efficiency, including automation, wherever applicable and conduct recurring assessments of all the key SOC workflows to highlight process deficiencies as well as improvement opportunities for staff.
Execute daily security technology administration functions
Perform Root Cause Analysis (RCA) on applicable technology
Validate quality of dashboards and alerts and suggest updates to reflect new threats and changes in the monitored environment
Support the Security Operations team in its efforts on various technology projects and operational initiatives
Work as a part of a team to ensure that Guardian customers' data, technology platforms, and infrastructure are available and safeguarded from cyber threats
Follow ITIL practices regarding incident, problem, and change management
Stay up to date with emerging cyber threats, industry best practices, and applicable regulatory requirements
Required Qualifications
Being curious and desire to analyze anomalies
Desire and passion to learn and grow in Cybersecurity
Customer-focused demeanor
Minimum 1-3 years of proven experience in building and operating security controls in at least two of the following domains:
SIEM management: Senior SOC Engineers must have extensive experience in managing SIEM systems, including configuring, tuning, and optimizing them for maximum efficiency.
Endpoint security: They must have a deep understanding of endpoint security solutions, including antivirus, anti-malware, and intrusion prevention systems.
Security incident handling: Senior SOC Engineers must have experience in handling security incidents, including identifying the source of the threat, containing it, and preventing further damage.
Data Loss Prevention (DLP): They must have experience in implementing and managing DLP solutions to prevent data breaches.
Threat intelligence: They must stay up-to-date with the latest security threats and trends, and use this information to improve the organization's security posture.
Team management: Senior SOC Engineers must lead and manage the security operations center team, including hiring, training, and mentoring team members.
Documentation: They must ensure that all security events, incidents, and responses are properly documented for future reference and analysis.
Collaboration: Senior SOC Engineers must work closely with other IT teams, including network engineers, system administrators, and application developers, to ensure that all systems are secure.
Continuous improvement: They must continuously evaluate and improve the organization's security posture by implementing new technologies, processes, and procedures.
Requirements for a Senior SOC Engineer typically include a bachelor's degree in computer science or a related field, along with relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Ethical Hacker (CEH). Strong leadership skills, analytical skills, attention to detail, and the ability to work well under pressure are also essential. Ability to effectively work in a team, as well as to be an independent contributor on select projects
Preferred Qualifications
Recognized Security Industry and Public Cloud IaaS certifications
Familiarity with security industry standards and best practices (NIST 800-53, ISO27001, NIST CSF, HITRUST, NYDFS-Cybersecurity, HIPAA, FedRAMP, OWASP, etc.)
Familiarity with ITIL; experience with incident, problem, change, and risk management
Qualifications:
This position can be based in any of the following locations:
Chennai, Gurgaon
Current Guardian Colleagues: Please apply through the internal Jobs Hub in Workday
Provide tier two operational support, leading team efforts in resolution of incidents and outages for information security technology and its dependencies on Public and Private Cloud computing environments, shared platforms, and operating systems for more than three of the following technologies:
Ensuring team's adherence to SOPs, training and performance monitoring for team members, and continuous process improvement for efficiency, including automation, wherever applicable and conduct recurring assessments of all the key SOC workflows to highlight process deficiencies as well as improvement opportunities for staff.
- Malware Analysis
- SIEM (Splunk)
- Software-defined (Cloud) Network Security
- Endpoint Security Protection
- Data Loss Prevention
Execute daily security technology administration functions
Perform Root Cause Analysis (RCA) on applicable technology
Validate quality of dashboards and alerts and suggest updates to reflect new threats and changes in the monitored environment
Support the Security Operations team in its efforts on various technology projects and operational initiatives
Work as a part of a team to ensure that Guardian customers' data, technology platforms, and infrastructure are available and safeguarded from cyber threats
Follow ITIL practices regarding incident, problem, and change management
Stay up to date with emerging cyber threats, industry best practices, and applicable regulatory requirements
Required Qualifications
Being curious and desire to analyze anomalies
Desire and passion to learn and grow in Cybersecurity
Customer-focused demeanor
Minimum 1-3 years of proven experience in building and operating security controls in at least two of the following domains:
- Network/Perimeter Security, including Next-Gen firewalls, intrusion prevention systems, proxies, and Web Application firewalls (WAFs)
- Enterprise Endpoint (host-based) Security
- DLP and Secure Data Transmission, Storage, and Access
- Identity and Access Management / User Behavior Analytics
SIEM management: Senior SOC Engineers must have extensive experience in managing SIEM systems, including configuring, tuning, and optimizing them for maximum efficiency.
Endpoint security: They must have a deep understanding of endpoint security solutions, including antivirus, anti-malware, and intrusion prevention systems.
Security incident handling: Senior SOC Engineers must have experience in handling security incidents, including identifying the source of the threat, containing it, and preventing further damage.
Data Loss Prevention (DLP): They must have experience in implementing and managing DLP solutions to prevent data breaches.
Threat intelligence: They must stay up-to-date with the latest security threats and trends, and use this information to improve the organization's security posture.
Team management: Senior SOC Engineers must lead and manage the security operations center team, including hiring, training, and mentoring team members.
Documentation: They must ensure that all security events, incidents, and responses are properly documented for future reference and analysis.
Collaboration: Senior SOC Engineers must work closely with other IT teams, including network engineers, system administrators, and application developers, to ensure that all systems are secure.
Continuous improvement: They must continuously evaluate and improve the organization's security posture by implementing new technologies, processes, and procedures.
Requirements for a Senior SOC Engineer typically include a bachelor's degree in computer science or a related field, along with relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Ethical Hacker (CEH). Strong leadership skills, analytical skills, attention to detail, and the ability to work well under pressure are also essential. Ability to effectively work in a team, as well as to be an independent contributor on select projects
Preferred Qualifications
Recognized Security Industry and Public Cloud IaaS certifications
Familiarity with security industry standards and best practices (NIST 800-53, ISO27001, NIST CSF, HITRUST, NYDFS-Cybersecurity, HIPAA, FedRAMP, OWASP, etc.)
Familiarity with ITIL; experience with incident, problem, change, and risk management
Qualifications:
- Provide tier two operational support, leading team efforts in resolution of incidents and outages for information security technology and its dependencies on Public and Private Cloud computing environments, shared platforms, and operating systems for more than three of the following technologies:
- Ensuring team's adherence to SOPs, training and performance monitoring for team members, and continuous process improvement for efficiency, including automation, wherever applicable and conduct recurring assessments of all the key SOC workflows to highlight process deficiencies as well as improvement opportunities for staff.
- Malware Analysis
- SIEM (Splunk)
- Software-defined (Cloud) Network Security
- Endpoint Security Protection
- Data Loss Prevention
- Partner with other technology teams in handling and responding to internal customer issues, conducting problem analysis and providing solutions for service level improvements, and ensuring timely remediation of security issues in accordance with corporate policies and standards
- Execute daily security technology administration functions
- Perform Root Cause Analysis (RCA) on applicable technology
- Validate quality of dashboards and alerts and suggest updates to reflect new threats and changes in the monitored environment
- Support the Security Operations team in its efforts on various technology projects and operational initiatives
- Work as a part of a team to ensure that Guardian customers' data, technology platforms, and infrastructure are available and safeguarded from cyber threats
- Follow ITIL practices regarding incident, problem, and change management
- Stay up to date with emerging cyber threats, industry best practices, and applicable regulatory requirements
- Being curious and desire to analyze anomalies
- Desire and passion to learn and grow in Cybersecurity
- Customer-focused demeanor
- Minimum 1-3 years of proven experience in building and operating security controls in at least two of the following domains:
- Network/Perimeter Security, including Next-Gen firewalls, intrusion prevention systems, proxies, and Web Application firewalls (WAFs)
- Enterprise Endpoint (host-based) Security
- DLP and Secure Data Transmission, Storage, and Access
- Identity and Access Management / User Behavior Analytics
- Understanding of security architecture, operating and troubleshooting principles of Microsoft Windows and Linux operating systems
- SIEM management: Senior SOC Engineers must have extensive experience in managing SIEM systems, including configuring, tuning, and optimizing them for maximum efficiency.
- Endpoint security: They must have a deep understanding of endpoint security solutions, including antivirus, anti-malware, and intrusion prevention systems.
- Security incident handling: Senior SOC Engineers must have experience in handling security incidents, including identifying the source of the threat, containing it, and preventing further damage.
- Data Loss Prevention (DLP): They must have experience in implementing and managing DLP solutions to prevent data breaches.
- Threat intelligence: They must stay up-to-date with the latest security threats and trends, and use this information to improve the organization's security posture.
- Team management: Senior SOC Engineers must lead and manage the security operations center team, including hiring, training, and mentoring team members.
- Documentation: They must ensure that all security events, incidents, and responses are properly documented for future reference and analysis.
- Collaboration: Senior SOC Engineers must work closely with other IT teams, including network engineers, system administrators, and application developers, to ensure that all systems are secure.
- Continuous improvement: They must continuously evaluate and improve the organization's security posture by implementing new technologies, processes, and procedures.
- Requirements for a Senior SOC Engineer typically include a bachelor's degree in computer science or a related field, along with relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Ethical Hacker (CEH). Strong leadership skills, analytical skills, attention to detail, and the ability to work well under pressure are also essential. Ability to effectively work in a team, as well as to be an independent contributor on select projects
- Recognized Security Industry and Public Cloud IaaS certifications
- Familiarity with security industry standards and best practices (NIST 800-53, ISO27001, NIST CSF, HITRUST, NYDFS-Cybersecurity, HIPAA, FedRAMP, OWASP, etc.)
- Familiarity with ITIL; experience with incident, problem, change, and risk management
This position can be based in any of the following locations:
Chennai, Gurgaon
Current Guardian Colleagues: Please apply through the internal Jobs Hub in Workday
View Full Job Description
Add your resume
80%
Upload your resume, increase your shortlisting chances by 80%
Similar Jobs
Google, India (On-Site)
Tekion Corp, India (Hybrid)
Trend Micro, Netherlands (On-Site)
ByteDance, Singapore (On-Site)
Reversing Labs, United Kingdom (Remote)
The Walt Disney Company, Singapore (On-Site)
Rackspace Technology, Mexico (Remote)
Anavation, United States (On-Site)
LeoVegas, Sweden (Hybrid)
Trend Micro, Taiwan (On-Site)
Get notifed when new similar jobs are uploaded
Similar Skill Jobs
Barracuda Networks Inc , India (On-Site)
N-iX, Ukraine (Flexible)
Barracuda Networks Inc , India (On-Site)
FCM Travel, India (On-Site)
Google, (On-Site)
Tekion Corp, India (Hybrid)
Reversing Labs, United States (Remote)
Max Secure Software, India (Remote)
Google, (On-Site)
Postman, United States (On-Site)
Get notifed when new similar jobs are uploaded
Jobs in Gurugram, Haryana, India
Solvative, India (On-Site)
DigitalOcean, India (Hybrid)
Zones, India (On-Site)
Godrej Industries Group, India (On-Site)
Velotio Technologies, India (Remote)
Zeta, India (On-Site)
Kenvue, India (On-Site)
Hitachi, India (Remote)
Get notifed when new similar jobs are uploaded
Cyber Security Jobs
Rackspace Technology, Mexico (Remote)
PwC, India (On-Site)
Palo Alto Networks, Switzerland (Remote)
Razer, Malaysia (On-Site)
ION, Italy (Hybrid)
PwC, Canada (On-Site)
Palo Alto Networks, United Arab Emirates (Remote)
Applike, Germany (Hybrid)
PwC, South Africa (On-Site)
PwC, Singapore (On-Site)
Get notifed when new similar jobs are uploaded
