SOC Analyst

Job Role: SOC Analyst (L3 Admin)

Location: Dallas, TX (Hybrid)

Type: Fulltime

Job Description:

HCL CSFC provides a superior foundation for building a professional career - a place for people to learn, to achieve and grow. A philosophy that balances personal lifestyles, perspectives and needs is an important part of our culture.

HCL CSFC is looking for an experienced SOC Analyst professional to join its team.

Candidate Persona

1. Ability to work with very large and complex network.
2. Self-motivated individual and creative thinker who will take ownership of tasks and projects, able to work with the team, and manages tasks effectively and has a proven track record of consist and organized outputs.
3. The ideal candidate will demonstrate an eagerness to understand complex problems and requirements, an aptitude for translating these problems into workable designs and solutions, and will possess a keen eye for detail.

Skills Required

1. Having knowledge / experience on any SIEM tool (SPLUNK, Chronical, Sentinel, Qradar) and SOAR tools ( Splunk, XOR, Chronical, XSIAM and Logic Aps).
2. Exposure to Mitre framework and equivalent, Hands-on experience in EDR platforms and threat analysis, threat hunting / incident response experience.
3. Exposure to handle IR.
4. Experience in Automation.
5. Experience in analysing security incidents and responding to them in methodical manner
6. Knowledge in Network security/ System Security/ Endpoint Security.
7. Experience of Event Monitoring and analysis and escalations. Provide inputs for content management.
8. Experience on Monthly, Weekly, and daily reporting.
9. Willing to work on 24/7 operations.
10. Review SIEM escalated incidents and qualify true positives
11. Provide a monthly trend and security analysis summary report
12. Provide SIEM event/Incident analytics support
13. Provide log analysis summary and recommendations on detection/protection of incidents
14. Perform advanced triages and work in collaboration with resolved groups, third party or with designated customer contacts
15. Liaise between cross functional teams and assist in formulating security incident response report
16. Advocate protection and mitigation strategies to be implemented from lessons learnt exercises
17. Strong knowledge of Operating systems namely Windows, linux and MAC
18. Strong understanding of cyber security threats
19. Knowledge of recent cyber security trends
20. Experience in creating rules in SIEM
21. Understanding of usage of AI in cyber security

Soft skills

1. Shall have good verbal/written communication skills
2. Should be willing to work in 24x7 environments
3. From time-to-time travel opportunities may be assigned
4. Incumbent should carry continual system improvement mindset and able to demonstrate in work.
5. Client facing technical analysis report and presentation skills