Strong understanding of SIEM operations, alert monitoring, and correlation rules. Hands-on experience in security incident investigation and Root Cause Analysis (RCA). Knowledge of threat hunting methodologies and techniques. Practical experience with EDR/XDR platforms. Good understanding of the MITRE ATT&CK framework. Basic knowledge of static malware analysis and malware investigation. Knowledge of DLP incident triage and investigation. Understanding of common cybersecurity threats, attack techniques, and incident response procedures. Strong analytical and problem-solving skills. Excellent incident documentation and reporting skills. Good verbal and written communication skills. Ability to work effectively in a 24x7 rotational shift environment.

Computer Science, Information Technology, Cybersecurity, Electronics, or a related field.

Required Skills

Strong understanding of SIEM operations, alert monitoring, and correlation rules.

Hands-on experience in security incident investigation and Root Cause Analysis (RCA).

Knowledge of threat hunting methodologies and techniques.

Practical experience with EDR/XDR platforms.

Good understanding of the MITRE ATT&CK framework.

Basic knowledge of static malware analysis and malware investigation.

Knowledge of DLP incident triage and investigation.

Understanding of common cybersecurity threats, attack techniques, and incident response procedures.

Strong analytical and problem-solving skills.

Excellent incident documentation and reporting skills.

Good verbal and written communication skills.

Ability to work effectively in a 24x7 rotational shift environment.

Preferred Certifications

CEH (Certified Ethical Hacker)

Microsoft SC-200

Splunk Power User

OEM SIEM Certification

Other relevant cybersecurity certifications will be an advantage.

Preferred Experience

Minimum 1 year of hands-on experience handling live P1/P2 security incidents.

Experience working in a 24x7 Security Operations Center (SOC).

Experience with SIEM, EDR/XDR, and security monitoring platforms.

Experience preparing client-facing incident reports.

Experience in threat hunting and security incident investigation.

Exposure to BFSI, IT-ITES, or enterprise security monitoring environments will be an advantage.

Qualifications

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Electronics, or a related field.

Relevant cybersecurity certifications or specialized SOC/security training will be preferred.

Strong practical knowledge of cybersecurity operations and security monitoring tools.

Candidate Profile

The ideal candidate should be:

Analytical and detail-oriented.

Confident in handling security incidents and investigations.

Comfortable working under pressure during critical/P1 incidents.

Good at incident documentation and technical reporting.

Capable of independently investigating security alerts.

Comfortable communicating with clients and internal stakeholders.

Willing to work in rotational 24x7 shifts.

Interested in continuous learning and keeping up with emerging cybersecurity threats.