Technical Specialist

Technical Specialist - Cyber Security General Information Req WD00088826 Career area Services Country Region India State Karnataka City BANGALORE Date Monday September 29 2025 Working time Full-time Additional Locations India - Karn taka - Bangalore India - Karn taka - BANGALORE Why Work at Lenovo We are Lenovo We do what we say We own what we do We WOW our customers Lenovo is a US 69 billion revenue global technology powerhouse ranked 196 in the Fortune Global 500 and serving millions of customers every day in 180 markets Focused on a bold vision to deliver Smarter Technology for All Lenovo has built on its success as the world s largest PC company with a full-stack portfolio of AI-enabled AI-ready and AI-optimized devices PCs workstations smartphones tablets infrastructure server storage edge high performance computing and software defined infrastructure software solutions and services Lenovo s continued investment in world-changing innovation is building a more equitable trustworthy and smarter future for everyone everywhere Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited HKSE 992 ADR LNVGY This transformation together with Lenovo s world-changing innovation is building a more inclusive trustworthy and smarter future for everyone everywhere To find out more visit and read about the latest news via our Description and Requirements Security Operations Centre SOC Analyst plays a vital role in Security delivery As a SOC Analyst Level 3 you will be on the front line of Cyber Defense detecting responding to Cyber Incidents as they happen You will work with other team members to provide situational awareness through detection containment and remediation of IT threats This job requires great attention to detail and general awareness of Cyber Security tools like SIEM XDR EDR IDS IPS ability understand various logs - network logs sys logs Firewall logs As a SOC Analyst you are expected to have working knowledge in areas of networking malware analysis incident response vulnerability management Threat vulnerability analysis Investigate document report Information security issues emerging trends Analysis response to unknown vulnerabilities Responsibilities As a SOC Analyst - Level 3 you will Operate as detection and security incident response subject-matter expert Technical subject-matter expert in SOC SIEM and supporting technologies EDR UEBA etc to develop custom queries e g KQL and playbooks for the SOC analysts to utilize in their investigations Align and maintain detection capability to the Mitre attack framework Perform root cause analysis of detection failures identify areas for improvement Drive the continuous development of detection capability for SOC Manage investigate and resolve complex issues with the Security tooling Securely configure the SIEM and other SOC solutions in accordance with relevant policy and regulation Support the Threat hunters in executing complex data analysis Provide a point of escalation for SOC security detection technical service issues Ensure the relevant security tools are compliant with company standards and governance Contribute to existing Policy procedures and process documentation enhancements Define and implement technical governance processes for security tooling of SOC SIEM and other security tools including AV EDR Defender Cloud Create and review detection technology high and low level designs Propose and identify automation opportunities resulting from incidents Provide recommendations to the Client team on how to mitigate or avert the occurrence of any suspicious activity within their environment Provide In depth analysis to the user customer about the security incidents eg Phishing attack Troubleshoot connector logger Manager for log retrievals Prepare SOC Management Reports Analyzing preparing daily and monthly reports based on the devices which are being monitored Creating Reports and Dashboards based on the customer requirement Creating Queries for the Rules requested by client for real time alerts Creating Reports which helps in providing the logs for the alerts for finding any possible threats Analyze a variety of network and host-based security appliance logs Firewalls NIDS HIDS Sys Logs etc to determine the correct remediation actions and escalation paths Independently follow procedures to contain analyze and eradicate malicious activity Change Management Implementation Independently implement changes to meet customer infrastructure needs within area of technical responsibility Patch and Security Management Apply patch and security changes per policy Configuration Management Review Configuration Management Database CMDB entries to ensure they are complete and accurate Quality Provide continual improvement recommendations for direct responsibility area process improvement technical standard updates etc Project Management Lead participate in customer and internal projects including transformation Customer Relationship Management Set expectations with customers and or internal businesses end users within defined parameters Teamwork Work as part of a team which may be virtual and or global Participate as part of a team and maintains good relationships with team members and customers Skill 8 - 12 years of relevant experience Typical skills include Fine-tune SIEM and other SOC tooling to exclude noise and false positives Create and fine-tune content in SIEM - correlation rules Dashboard and Reports etc Interact with SIEM EDR and NDR vendors TAC Support to remediate any issues with tooling Evaluate new solutions for SOC Identify opportunities to improve overall capacity playbook and runbook Understanding of threat landscapes and threat modelling security threat and vulnerability management and security monitoring Working knowledge of tools and techniques used by attackers to gain entry into corporate networks including common IT system flaws and vulnerabilities Knowledge of industry standards such as ISO 27001 HIPAA FedRAMP Cloud Security Alliance NIST frameworks and risk methodologies Demonstrated experience in communicating complex security concepts both verbally and in writing to a variety of audiences Must take ownership of tasks and demonstrate high degree of autonomy to ensure completion Excellent understanding of related technologies Networking Operating Systems General Project Management Expert Customer Vendor Management IExpert Business Analysis Expert Has ability to perform drive resolution of problems on individual products Able to communicate broad and specific concepts with team and to peers Able to produce documentation for use by team and customer Able to perform drive resolution of problems on combinations and interactions of products Strong verbal written communication skills Proactive approach to meet exceed goals Qualification Experience Bachelor s degree in engineering Electronics Communication Computer Science 8 - 12 years of relevant experience in SOC domain Strong understanding ITIL process Recognized Cyber Security certifications such as CISSP CISM SANS SABSA OSCP are advantageous Microsoft Security and compliance certifications such as SC-200 MS-500 and AZ-500 preferred Additional Locations India - Karn taka - Bangalore India - Karn taka - BANGALORE India India - Karn taka India - Karn taka - Bangalore India - Karn taka - BANGALORE NOTICE FOR PUBLIC At Lenovo we follow strict policies and legal compliance for our recruitment process which includes role alignment employment terms discussion final selection and offer approval and recording transactions in our internal system Interviews may be conducted via audio video or in-person depending on the role and you will always meet with an official Lenovo representative Please beware of fraudulent recruiters posing as Lenovo representatives They may request cash deposits or personal information Always apply through official Lenovo channels and never share sensitive information Lenovo does not solicit money or sensitive information from applicants and will not request payments for training or equipment Kindly verify job offers through the official or contact IndiaTA lenovo com Stay informed and cautious to protect yourself from recruitment fraud Report any suspicious activity to local authorities