Praneetha D.’s Post

#hirring #soc analyst #onsite(Qatar) Immediate opening for SOC Analyst - Onsite EXP: 13+ yrs JD:  Monitoring and analysis of cyber security events with the use of (SIEM) and other tools.  SOAR experience to Design and configure automation and workbooks.  SIEM as MS sentinel and Q-radar and other tools use case management (alerts and reports) as per industry best practices.  Monitor EDR to detect and investigate suspicious activities across all products.  Monitor shadow IT for external threats and data exfiltrate.  Provide analysis and trending of security log data from many heterogeneous IT security devices.  Continuous threat hunting and liaise with the relevant team in case suspected incident.  Provide threat and vulnerability analysis as well as security advisory services.  Analyze and respond to previously undisclosed software and hardware vulnerabilities.  Investigate, document, and report on Cybersecurity issues and emerging trends.  Review SOC Analyst ticket queue, review tickets, closure or reassignment as needed.  Create/review/modify documentation as needed, to include any process or procedure and thus ensure its up to date and standard.  Provide analytical feedback on network traffic patterns.  Provide analytical feedback related to malware and other network threats.  Understand information security policies and best practices in environments.  Provide technical support within the Security Incident and Event Management team to assist in the investigation and remediation of security incidents.  Escalate incident remediation changes with other business units, vendors, and customers, adhering to a predefined ITIL change management framework.  Where necessary, liaise and work with Professional Services Engineers and Solutions Architects around incident investigation and reporting.  Maintain detailed knowledge of the environment(s), where applicable, by maintaining and updating relevant documentation such as Network Diagrams, Configuration and Asset Databases along with process and procedural documentation.  Change management calendar updates/closures.  Monthly SOC Reports.  SOC White Board daily/weekly updates.  Conduct security assessments regularly to identify vulnerabilities and performing risk analysis.  Document incidents to contribute to incident response and disaster recovery plans.  In the case of third-party vendors, verify their security strength and collaborate with them.  Analysis of phishing emails reported by internal end users.  excellent understanding of application layer attacks, network level attacks, zero-day attacks etc. Skills & Requirements:  Requires Bachelor’s degrees in Computer/IT engineering or related field.  Professional Certifications – SOC Analyst (CSA, CompTIA CySA+ etc.), CEH.  SIEM Solution (Azure Sentinel, Q-Radar etc.). If interested, share your updated profile to [email protected] with subject "SOC Analyst"

#urgentlyhiring for – #cybersecurity #incidentresponse #engineer Skillset : #SOC - #splunk , #qualys , #siem #1stRound #face2face #mandatory #shift – 24/7 #location – #bangalore #noticeperiod – #immediatejoiners to #30days #Experience – #6years + #relevant #experience – #5years #JobProfileSummary As the CSIR engineer, the typical day can vary greatly depending on the specific position. They may begin their day by looking over dashboards, reports from the previous day or shift, including checking for any new threats and identifying malware that may have infiltrated the system. also prepare for and respond to system breaches or attacks. These processes might differ between Clients, but they generally include responding to hacks or network insecurities and working to prevent new ones. Your key responsibilities will include but are not limited to: Manage day-to-day operations of reviewing SIEM alert and other vulnerability management tools. Ensure that all the various environments within the Client have adequate scans and assessments performed. Participate in security incident response process when required. Support the Security Management Lifecycle including: o Real-time Monitoring o Incident investigation. o Research. o Correlation. o Trending. o Remediation. o Setup and configure SIEM, including data analysis, rule creation. establish thresholds, reference lists, and other duties. o Setup, investigate, and advanced troubleshooting of log transport agents. Work with Client technology owners and platform leads to ensure vulnerabilities and issues are patched and remediated on time. Oversee the implementation and management of operational security reporting activities. Regularly, meet with the internal team to review security reports, status, review any risks, issues, incidents, and outstanding activities. Vulnerability Management, Malware analysis, Threat hunting and assist in forensic analysis. Managing stakeholder expectations and assisting in the reduction of the impact of a cybersecurity event or incident. Contribute to maintaining knowledge base/playbooks by updating procedural documentation. Actively participate in process improvement with other team members and Wider team. Conduct presentations of the security breaches findings to the business and advise on new measures required to prevent reoccurrence of similar breaches. What would make you a good fit for this role? (Mandatory skills) Experience in working in Security Operation Centre. Demonstrated genuine interests and passion for cybersecurity, incident problem solving is a must. Working knowledge of security operations environments and security incident management & response handling. Hands-on experience in managing Splunk, other SIEM logging solution like Microsoft Sentinel, ArcSight, LogRythm. Hands-on knowledge on the creation of use cases within SIEM solution including advanced correlation rules. share your resume at [email protected]

#urgentlyhiring for – #cybersecurity #incidentresponse #engineer Skillset : #SOC - #splunk , #qualys , #siem #1stRound #face2face #mandatory #shift – 24/7 #location – #bangalore #noticeperiod – #immediatejoiners to #30days #Experience – #6years + #relevant #experience – #5years #JobProfileSummary As the CSIR engineer, the typical day can vary greatly depending on the specific position. They may begin their day by looking over dashboards, reports from the previous day or shift, including checking for any new threats and identifying malware that may have infiltrated the system. also prepare for and respond to system breaches or attacks. These processes might differ between Clients, but they generally include responding to hacks or network insecurities and working to prevent new ones. Your key responsibilities will include but are not limited to: Manage day-to-day operations of reviewing SIEM alert and other vulnerability management tools. Ensure that all the various environments within the Client have adequate scans and assessments performed. Participate in security incident response process when required. Support the Security Management Lifecycle including: o Real-time Monitoring o Incident investigation. o Research. o Correlation. o Trending. o Remediation. o Setup and configure SIEM, including data analysis, rule creation. establish thresholds, reference lists, and other duties. o Setup, investigate, and advanced troubleshooting of log transport agents. Work with Client technology owners and platform leads to ensure vulnerabilities and issues are patched and remediated on time. Oversee the implementation and management of operational security reporting activities. Regularly, meet with the internal team to review security reports, status, review any risks, issues, incidents, and outstanding activities. Vulnerability Management, Malware analysis, Threat hunting and assist in forensic analysis. Managing stakeholder expectations and assisting in the reduction of the impact of a cybersecurity event or incident. Contribute to maintaining knowledge base/playbooks by updating procedural documentation. Actively participate in process improvement with other team members and Wider team. Conduct presentations of the security breaches findings to the business and advise on new measures required to prevent reoccurrence of similar breaches. What would make you a good fit for this role? (Mandatory skills) Experience in working in Security Operation Centre. Demonstrated genuine interests and passion for cybersecurity, incident problem solving is a must. Working knowledge of security operations environments and security incident management & response handling. Hands-on experience in managing Splunk, other SIEM logging solution like Microsoft Sentinel, ArcSight, LogRythm. Hands-on knowledge on the creation of use cases within SIEM solution including advanced correlation rules. share your resume at [email protected]

#urgentlyhiring for – #cybersecurity #incidentresponse #engineer Skillset : #SOC - #splunk , #qualys , #siem #1stRound #face2face #mandatory #bangalore #shift – 24/7 location – #bangalore #noticeperiod – #immediatejoiners to #30days #Experience – #6years + #relevant #experience – #5years #JobProfileSummary As the CSIR engineer, the typical day can vary greatly depending on the specific position. They may begin their day by looking over dashboards, reports from the previous day or shift, including checking for any new threats and identifying malware that may have infiltrated the system. also prepare for and respond to system breaches or attacks. These processes might differ between Clients, but they generally include responding to hacks or network insecurities and working to prevent new ones. Your key responsibilities will include but are not limited to: Manage day-to-day operations of reviewing SIEM alert and other vulnerability management tools. Ensure that all the various environments within the Client have adequate scans and assessments performed. Participate in security incident response process when required. Support the Security Management Lifecycle including: o Real-time Monitoring o Incident investigation. o Research. o Correlation. o Trending. o Remediation. o Setup and configure SIEM, including data analysis, rule creation. establish thresholds, reference lists, and other duties. o Setup, investigate, and advanced troubleshooting of log transport agents. Work with Client technology owners and platform leads to ensure vulnerabilities and issues are patched and remediated on time. Oversee the implementation and management of operational security reporting activities. Regularly, meet with the internal team to review security reports, status, review any risks, issues, incidents, and outstanding activities. Vulnerability Management, Malware analysis, Threat hunting and assist in forensic analysis. Managing stakeholder expectations and assisting in the reduction of the impact of a cybersecurity event or incident. Contribute to maintaining knowledge base/playbooks by updating procedural documentation. Actively participate in process improvement with other team members and Wider team. Conduct presentations of the security breaches findings to the business and advise on new measures required to prevent reoccurrence of similar breaches. What would make you a good fit for this role? (Mandatory skills) Experience in working in Security Operation Centre. Demonstrated genuine interests and passion for cybersecurity, incident problem solving is a must. Working knowledge of security operations environments and security incident management & response handling. Hands-on experience in managing Splunk, other SIEM logging solution like Microsoft Sentinel, ArcSight, LogRythm. Hands-on knowledge on the creation of use cases within SIEM solution including advanced correlation rules. share your resume at [email protected]

#urgentlyhiring for – #cybersecurity #incidentresponse #engineer #7years + Skillset : #SOC - #splunk , #qualys , #siem #1stRound #face2face #mandatory #bangalore #shift – 24/7 location – #bangalore #noticeperiod – #immediatejoiners to #30days #Experience – #7years + #relevant #experience – #5years #JobProfileSummary As the CSIR engineer, the typical day can vary greatly depending on the specific position. They may begin their day by looking over dashboards, reports from the previous day or shift, including checking for any new threats and identifying malware that may have infiltrated the system. also prepare for and respond to system breaches or attacks. These processes might differ between Clients, but they generally include responding to hacks or network insecurities and working to prevent new ones. Your key responsibilities will include but are not limited to: Manage day-to-day operations of reviewing SIEM alert and other vulnerability management tools. Ensure that all the various environments within the Client have adequate scans and assessments performed. Participate in security incident response process when required. Support the Security Management Lifecycle including: o Real-time Monitoring o Incident investigation. o Research. o Correlation. o Trending. o Remediation. o Setup and configure SIEM, including data analysis, rule creation. establish thresholds, reference lists, and other duties. o Setup, investigate, and advanced troubleshooting of log transport agents. Work with Client technology owners and platform leads to ensure vulnerabilities and issues are patched and remediated on time. Oversee the implementation and management of operational security reporting activities. Regularly, meet with the internal team to review security reports, status, review any risks, issues, incidents, and outstanding activities. Vulnerability Management, Malware analysis, Threat hunting and assist in forensic analysis. Managing stakeholder expectations and assisting in the reduction of the impact of a cybersecurity event or incident. Contribute to maintaining knowledge base/playbooks by updating procedural documentation. Actively participate in process improvement with other team members and Wider team. Conduct presentations of the security breaches findings to the business and advise on new measures required to prevent reoccurrence of similar breaches. What would make you a good fit for this role? (Mandatory skills) Experience in working in Security Operation Centre. Demonstrated genuine interests and passion for cybersecurity, incident problem solving is a must. Working knowledge of security operations environments and security incident management & response handling. Hands-on experience in managing Splunk, other SIEM logging solution like Microsoft Sentinel, ArcSight, LogRythm. Hands-on knowledge on the creation of use cases within SIEM solution including advanced correlation rules. share your resume at [email protected]

SOC Analyst. A Security Operations Center (SOC) Analyst plays a crucial role in an organization's cybersecurity strategy. SOC Analysts are responsible for monitoring, detecting, responding to, and mitigating security threats and incidents within an organization's IT infrastructure. Here are key aspects of the SOC Analyst role: Monitoring and Analysis: Continuously monitor security alerts and events from various sources, such as security information and event management (SIEM) systems, intrusion detection systems (IDS), and other security tools. Analyze network traffic patterns, logs, and security alerts to identify potential security incidents. Incident Detection and Response: Identify and investigate security incidents, including unauthorized access, malware infections, and other security breaches. Follow predefined incident response procedures to contain, eradicate, and recover from security incidents. Vulnerability Assessment: Conduct regular vulnerability assessments to identify and assess potential weaknesses in the organization's systems and networks. Work on remediation plans to address identified vulnerabilities and improve overall security posture. Threat Intelligence: Stay informed about the latest cybersecurity threats and vulnerabilities through threat intelligence feeds. Integrate threat intelligence into security monitoring to enhance the detection of emerging threats. Security Tool Management: Manage and configure security tools such as firewalls, antivirus software, IDS/IPS, and SIEM systems. Ensure that security tools are properly tuned and updated to provide effective protection. Documentation and Reporting: Maintain detailed records of security incidents, including the timeline of events and actions taken during incident response. Generate regular reports on security incidents, trends, and vulnerabilities for management and other stakeholders. Collaboration and Communication: Work closely with other IT and security teams to share information about threats, vulnerabilities, and incident response activities. Communicate effectively with internal stakeholders and external partners during incident investigations. Continuous Improvement: Participate in post-incident reviews to identify areas for improvement in security processes and procedures. Stay updated on industry best practices and emerging security technologies. SOC Analysts often work in shifts to ensure 24/7 coverage. They may also be required to participate in on-call rotations to respond to incidents outside regular working hours. #jobs #securityanalysis #securityanalyst #socanalyst #socanalyst #informationsecurity #informationsecurityawareness #cybersecurity #job #securityjobs #hr #grouphr #cyberdefense #cyberawareness #cyberattack #cyberjobs #cyberjobs

Greetings from Soft_AI, We have the following urgent requirement,please share your resume on [email protected] urgently if you are fine with JD.. JD : *PLEASE NOTE THIS POSITION WILL ALLOW CONSULTANT TO WORK REMOTELY. HOWEVER, DUTIES WILL REQUIRE CONSULTANT TO WORK ONSITE 3 DAYS PER WEEK. THEREFORE, WILL BE CRITICAL FOR THE CONSULTANT TO BE LOCAL TO NYC AND ABLE TO TRAVEL TO OUR OFFICE WITHOUT ISSUE, AS NEEDED (AT THEIR OWN EXPENSE). One of 3 shifts a day in a 24/7 operation (*consultant needs to be flexible enough to fill any of the 3 shifts as needed): Shift 1 = 12am – 8:30am Shift 2 = 8am – 4:30pm Shift 3 = 3:30pm – 12am SUMMARY OF THE FUNCTION/ROLE: The IT Cyber Security Operations Monitoring Team is seeking consultants to perform Tier 2 SOC follow-up and remediation activity on escalated incidents. The Tier 2 level Analyst (Senior Analyst) should have the ability to respond to a wide range of escalated Incidents and follow through with incident lifecycle through completion. Some of the areas we are looking for candidates to have experience in include but are not limited to: Critical Key requirements: * Critical Thinker & Analytical Aptitude * SIEM Experience (Splunk) * Tier II SOC Incident Handling & Investigation * 24/7 Security Operation Center Experience * Threat Detection & Response Experience * Threat Detection Technologies Experience QUALIFICATIONS EXPERIENCE & EDUCATION: * Knowledge of Enterprise Networks & Security infrastructure, Communication and internet security systems, Firewalls, Intrusion Protection Systems, Remote Access VPN, Proxy, Wireless Security, NAC, Enterprise ID Management systems, Database, computer systems, security event analysis and forensic investigations. * Organizational, decision making, and communications skills. * Knowledge of network security operations with a solid understanding of the technology and attention to detail. * Creative problem-solving abilities, coupled with a desire to take on responsibility. * Strong team player with the ability to engage and promote a cohesive unit. * Ability to handle multiple tasks in a fast-paced environment and prioritize highly varied work in order to maintain required productivity levels. * Ability to communicate technical' info and ideas so others will understand. * Ability to make appropriate decisions considering the relative costs and benefits of potential actions. * Ability to apply collaborative skills and traits that create solutions and results to unexpected situations. * Bachelor’s degree in Computer Science, Cyber Security, Information Technology or related discipline OR a satisfactory equivalent with 4-6 years of Information Technology experience.Additional Skills and Information:Security Event Monitoring, Network Event monitoring, Email Header Analysis, Packet Capture inspection, Malware Triage & Analysis, SIEM (Splunk) & TIP Experience

SOC Analyst Level 1 (L1) Roles and Responsibilities Primary Focus: Monitor networks and systems for security breaches, typically using Security Information and Event Management (SIEM) tools. Alert Handling: They are the first to respond to cybersecurity alerts. Their job is to identify whether an alert signals a real threat or is a false positive. Initial Assessment: Perform a basic threat analysis and escalate it to Level 2 analysts for further investigation if necessary. Reporting Incidents: Document incidents and basic details for further analysis. Incident Logging: Keep records of security incidents and threats. Skills Required ✓ Basic understanding of network security and protocols. ✓ Familiarity with common cybersecurity threats and attack methodologies. ✓ Ability to operate security monitoring tools. SOC Analyst Level 2 (L2) Roles and Responsibilities In-depth Analysis: They receive escalated incidents from L1 analysts and perform a deeper analysis. Incident Validation: Validate and prioritize the incidents. Incident Handling: Begin initial response actions, like isolating the affected system or blocking malicious traffic. Communication: Coordinate with other teams for incident response, such as network or IT support teams. Mentoring: May provide guidance and mentorship to L1 analysts. Skills Required ✓ More advanced analytical skills to distinguish between false positives and genuine threats. ✓ Proficiency in using a broader range of security tools and technologies. ✓ Stronger understanding of the IT infrastructure and cybersecurity landscape. SOC Analyst Level 3 (L3) and higher Roles and Responsibilities Advanced Incident Response: Handle the most complex incidents that require deep understanding and analysis. Threat Hunting: Proactively search for undetected threats within the organization. Strategy and Development: Contribute to the development of security processes and procedures. Tool Customization and Development: Customize security tools and develop scripts to automate specific threat detection and response aspects. Leadership: Often served as the team leader or technical supervisor, guiding L1 and L2 analysts. Skills Required ✓ Expert-level knowledge in network security and various attack vectors. ✓ Experience with advanced security solutions and forensic tools. ✓ Possess robust problem-solving skills and the capability to make rapid decisions under high-stress conditions.