About the role
Responsibilities:
- Monitoring and Analysis: Monitor security alerts generated by various tools and systems in the SOC. Analyze and investigate alerts to identify potential security incidents.
- Incident Response: Execute predefined incident response procedures to address and mitigate security incidents. Escalate incidents to relevant teams as required.
- Documentation: Maintain detailed records of incidents, investigations, and actions taken. Generate incident reports for further analysis and improvement.
- Collaboration: Collaborate with other members of the SOC team, as well as IT and security teams across Nykaa, to share insights, enhance detection capabilities, and respond effectively to emerging threats.
- Tool Utilization: Utilize security information and event management (SIEM) tools, EDR, and other security technologies to strengthen monitoring and analysis capabilities.
The core requirements for the job include the following:
Key Skills:
- SOC Operations and Security Monitoring.
- SIEM tools: Splunk, Microsoft Sentinel, IBM QRadar, etc.
- EDR tools: CrowdStrike, Microsoft Defender, SentinelOne, etc.
- Security Incident Investigation and Response.
- Threat Detection, Log Analysis, and Alert Triage.
- Incident Documentation and Escalation.
- Important: Focus on candidates with hands-on SOC experience in monitoring, investigating, and responding to security alerts. Prioritize core security operations profiles over candidates working primarily in cloud security, application security, GRC, or penetration testing without SOC experience.