Engineer I, Security Operations

Overview

Security Operations Centre (SOC) Engineer role in Chennai, supporting a global 24x7x365 Security Operations Centre. You will monitor, triage, and respond to security incidents while improving threat identification and reporting.

What you'll do

• Continuously monitor security alerts from tools such as SIEM, IDS/IPS, firewalls, and antivirus.
• Triage and classify security incidents using established criteria.
• Assess incident severity and potential impact.
• Execute initial incident response including containment, eradication, and recovery.
• Escalate incidents to higher-level analysts or management as needed.
• Review and analyze logs to identify unusual patterns or activity.
• Use threat intelligence feeds and reports to enhance monitoring capabilities.

What you'll need

• Minimum 2 years of experience in event monitoring and management, preferably in a global SOC.
• Knowledge of log management tools and solutions (e.g., Splunk, Qradar).
• Knowledge of operating systems (Windows, Linux, and macOS).
• Good knowledge of networking and endpoint detection tools (e.g., Sophos, Rapid7 and NDR/EDR tools).
• Good communication and presentation skills.
• Experience in a fast-paced, globally dispersed environment.
• Educational background: BE/B. Tech Computer Science or similar.

Details

• Location: Chennai, TN.
• Reports to the SOC Manager.