Security Operation Centre

About Company:

BDO is a global network of professional services firms with a presence in over 166 countries, revenue of over USD 14 billion, and experience of over 60 years. It's a leading service provider for the mid-markets with client service at its heart.

BDO India Services Private Limited (or BDO India) is the India member firm of BDO International. BDO India offers strategic, operational, accounting and tax, and regulatory advisory & assistance for both domestic and international organizations across a range of industries. BDO India is led by more than 300+ Partners & Directors with a team of over 10,000 professionals operating across 14 cities and 20 offices. We expect to grow sizably in the coming 3-5 years, adding various dimensions to our business and multiplying and increasing the current team size multi-fold

About SOC:

We are seeking a detail-oriented SOC analyst for 24x7 operations with 3 to 10 years of hands-on experience in cybersecurity monitoring, security operations and understating of networking, operating systems along with basics of cyber investigations and security best practices. SOC A-Con would be responsible for handling escalated alerts from Analysts in the organization. In addition, they are expected to support Threat Intel Activities and Threat Hunting support as part activities.

Education & Qualification:

• 3 to 10 years of work experience in relevant domain.
• Bachelor’s degree in engineering, Computer Science, Information Security, or a related discipline. A master's degree is desirable.
• Should have expert level skills and OEM certification on minimum two cyber technologies listed XDR / Firewalls / Proxy / WAF / DDoS / NIPS / HIPS / SOAR

Key Responsibilities:

• Support round-the-clock monitoring of security alerts and events using SIEM platform. Act as shift leader and manage analysts working in MSS
• Investigate logs from various log sources to support investigation as required on the escalated events.
• Support onboarding of log sources to SIEM platform and run periodic check on correct logs being received by platform.
• Support cyber technologies like Firewalls / Proxy / WAF / DDoS / NIPS / HIPS / XDR / SOAR
• Review incidents, investigations, and remediation activities accurately.
• Identify log sources which are logging but content is missing and content which is not triggering
• Maintain and support operational integrity of SOC toolsets.