About the role
Roles and Responsibilities:• Perform real-time monitoring of security events from multiple log sources.• Daily tracking of events, alerts, and requests.• Perform first-level triage of alerts and escalate confirmed incidents to L2 with proper evidence.• Monitor SIEM components and analyze logs to ensure relevant security information isgathered.• Use the SIEM tool to document security incidents and responses daily.• Detect suspicious logs and create reports and charts for easy understanding.• Perform first-level phishing email analysis (headers, URLs, attachments).• Investigate basic alerts triggered by endpoints, email gateway, and antivirus.• Handle queries and requests through calls and emails.• Track vulnerability and patch status and follow up on closure.• Assist in conducting security awareness training.• Follow SOPs, playbooks, and shift handover procedures.• Work as part of a team to ensure corporate data and technology platform components aresafeguarded from known threats.
Preferred Qualifications:• 0-2 years of experience with a Bachelor's degree in Computer Science, or a related technicaldomain from reputed organizations.• Should have exposure to SIEM tools like QRadar, LogRhythm, sentinelone, Log360 andendpoint security like EDR, XDR (CrowdStrike, SentinelOne, Microsoft Defender for Endpoint).• Should have worked on SIEM tools like QRadar, LogRhythm, sentinelone and endpoint securitylike EDR, XDR (CrowdStrike, SentinelOne).• Should have basic knowledge of any DLP solution from any vendor.• Good written and verbal communication, and willingness to work in shifts.• Certifications such as CompTIA Security+ or CEH are an added advantage.