Title: Executive-Infosec
Area(s) of responsibility
Role: SOC L1 Analyst
Location: Noida
Educational Qualification: University degree in Computer Science/IT
Experience : 1-3 Years
Role & responsibilities:
- Provide technical and functional support to L2/L3 team with analytical feedback.
- Triage, investigate, document, and close security incidents and service requests in the ticketing system within defined SLAs, escalating to L2/L3 when required.
- Understand information security policies and best practices in Birlasoft environments.
- Inform L2/L3 team of proactive and reactive actions to ensure adherence to security policy.
- Review and understand collected metrics from monitoring systems and be aware of patterns and anomalies.
- Support incident response activities by collecting and preserving evidence, performing initial analysis, and escalating per playbooks to eliminate threats and identify root cause.
- Ensure incidents are handled in a manner that is consistent with established playbooks.
- Monitor SIEM and logging for alerts of potential network threats, intrusions, and/or compromises.
- Responsible for understanding the global threat environment and general security best practices.
- Assist with triage of service requests from automated sensors and internal requests for assistance.
- Assist with threat hunting by following runbooks, validating suspicious activity in logs/EDR, and escalating actionable findings to L2/L3.
- Interface with technical personnel from various disciplines to rapidly resolve critical issues.
- Appropriately inform and advise leadership of incidents and propose effective response and/or countermeasures for containment
Experience/ Qualifications:
- 1–3 years’ experience in Information Security or SOC operations.
- 1–2 years’ experience working in a SOC environment (monitoring, triage, and escalation).
- Knowledge of industry recognized analysis frameworks (Kill Chain, Diamond Model, MITRE ATT&CK, NIST Incident Response, etc.).
- Knowledge of Cloud Computing Fundamentals, EDR, DLP, Firewall.
- Thorough understanding of fundamental security and network concepts (Operating systems, intrusion/detection, TCP/IP, ports, etc.).
- Strong problem-solving and analytical skills, initiative driven, result oriented and ability to lead a technical team.
- Proven ability to work under stress in emergencies, with the flexibility to handle multiple high-pressure situations simultaneously.