SOC Analyst

Technical skill set Must have good understanding and extensive hands‑on experience on various security technologies for e.g. Firewalls, VPN's, IDS/IPS, end‑point security solutions (AV, HIPS, Hard Disk Encryption), Cloud Web Security solutions, Strong Authentication solutions, Mail Security Gateways, advanced persistent threat (APT) protection solution, PKI etc. Must possess sound knowledge of SIEM solutions like IBM QRadar / RSA NetWitness Suite and Log Management Solutions. Should have strong analytical skills. Should have good understanding about Public Cloud solutions and security relevant to infrastructure setup in public cloud environment (Azure/AWS/Google/IBM etc.). Must be well versed with Security Incident Management process, should have good understanding about the security forensic investigations process. Should understand customer's technical requirements and transform those in to a technical solution. Soft skills Shall have good verbal/written communication skills, and comfortable in working with customer managers (both technical and senior program level). Should have good presentation skills – shall be able to participate the review meetings and be able put across the points of concerns. Should have capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams. Should keep updated himself/herself about new trends/solutions. Should have thorough understanding about best practices being followed in the industry. Roles & Responsibilities Understand and get well‑versed with customer specific environment/processes‑procedures. Frontend the Integrated Security Operation Centre (ISOC) team based in Bangalore. Provide analysis and trending of security log data from a large number of heterogeneous security devices. Participate in Incident Response (IR) support when analysis confirms actionable incident. Provide threat and vulnerability analysis as well as security advisory services. Provide analysis and trending of security log data from a large number of heterogeneous security devices. Provide Incident Response (IR) support when analysis confirms actionable incident. Provide threat and vulnerability analysis as well as security advisory services. Analyse and respond to software and hardware vulnerabilities. Investigate, document, and report on information security issues and emerging trends. Perform regular (Daily/Weekly/Fortnightly/Monthly) operations reviews internally and with customer. Supporting proposed solution design with business case/business justification/ROI figures. Work with Customer to understand customer requirements and provide probable solution in discussion with HCL Security Practice team. Preparing Project Solution Documents or Technical Proposals. Manage high-performance of the self and the team. Maintain and manage the issues/risks. Technical Documentation – review and update - Technical Design Document, Risk Matrix, Post Installation Document, Run-books. #J-18808-Ljbffr