Soc Engineer

SOC Engineer SIEM | Threat Detection | Incident Response | EDR

Company: Spark Techwave InnovationZ Pvt Ltd
Job Type: Full-Time
Experience: 26 Years
Location: Chennai / Remote / Hybrid
Department: Cybersecurity / Security Operations Center (SOC)

Job Summary

Spark Techwave InnovationZ Pvt Ltd is looking for a SOC Engineer to monitor, detect, investigate, and respond to cybersecurity threats across enterprise IT environments.

The ideal candidate should have hands-on experience with SIEM platforms, security alert monitoring, incident investigation, threat detection, endpoint security, network security, and incident response. The candidate will work closely with cybersecurity, network, cloud, and infrastructure teams to identify and mitigate security threats.

Key Responsibilities

• Monitor security events and alerts from SIEM, EDR, firewall, IDS/IPS, and other security tools.
• Investigate and analyze security alerts to identify genuine threats and false positives.
• Perform initial security incident triage, investigation, containment, and escalation.
• Analyze logs from servers, endpoints, network devices, applications, and cloud environments.
• Correlate security events from multiple sources to identify suspicious activities.
• Investigate indicators of compromise, malicious IPs, domains, URLs, files, and user activities.
• Perform threat detection and basic threat hunting activities.
• Monitor endpoint security alerts and investigate malware or suspicious processes.
• Identify phishing, malware, brute-force, privilege escalation, and unauthorized-access attempts.
• Escalate critical security incidents according to defined incident-response procedures.
• Support incident containment, remediation, and recovery activities.
• Perform root-cause analysis and prepare detailed incident reports.
• Maintain security incident documentation, investigation notes, and SOC reports.
• Assist with developing and improving SIEM correlation rules, detection rules, and alert use cases.
• Monitor threat intelligence feeds and assess their relevance to the organization.
• Support vulnerability management and security hardening activities when required.
• Collaborate with network, cloud, infrastructure, application, and security teams.
• Follow SOC processes

Send your resume at [email protected]