Security Operations Center Analyst

4 weeks ago


Bengaluru, India Ringcentral Full time

Job Description As aSOC Analystat RingCentral, your primary responsibilities are to implement a comprehensive security monitoring, incident response and threat intelligence program for RingCentral s global cloud service, corporate and development environments. You will also be collaboratively providing feedback to improve security operations processes, generating actionable analysis and threat intelligence from tools, logs, and other data sources, ensuring strong documentation is in place to support ongoing SOC activities, and reporting your observations to other Security, Operations and IT personnel. Successful Candidates will: - Have proven skills in application security, security monitoring, incident response and intrusion analysis - Have strong knowledge of the diverse methods and technologies used to attack web/mobile/desktop applications, SaaS infrastructure, and data - Think critically, work well under pressure, and possess strong analytical, written, verbal, and interpersonal skills - Demonstrated track record of quality processes in candidate s work history - Be strongly self-motivated with an aptitude for both individual and team-oriented work - Have experience following and refining standard operating procedures and playbooks Responsibilities: - Monitor security events, analyze and investigate alarms, and maintain day-to-day operational activities of a secure cloud environment - Engage teams within and outside of RingCentral to mitigate and resolve cases - Maintain relevant documentation and audit artifacts - Identify and track suspicious system activity - Identify trends and patterns, and present them to Security Engineers to enhance our processes and systems - This role participates in on-call rotations Qualifications / Requirements: - 2+ years in a security engineering, SRE, or SOC roles in a cloud services environment - Experience with SIEM - Experience investigating security incidents - Basic knowledge AWS or GCP - Experience with IDS, case management, and related tools and practices - Experience with Linux, RedHat preferred - Basic knowledge of broad security topics such as encryption, application security, malware, ransomware, etc. - Knowledge of network, VoIP and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, SIP, RTP) Preferred Skills/Experience: - Any combination of the following certifications: - GCIA (GIAC Certified Intrusion Analyst) - GCIH (GIAC Certified Incident Handler) - GCFA (GIAC Certified Forensic Analyst) - GNFA (GIAC Certified Network Forensic Analyst) - GCFE (GIAC Forensic Examiner) - GASF (GIAC Advanced Smartphone Forensics) - GICA GCTI (GIAC Certified Cyber Threat Intelligence) - GPEN (GIAC Certified Pentester) - GWAPT (GIAC Certified Web Application Pentester) - GPYC (GIAC Certified Python Coder) - OSCP (Offensive Security Certified Pentester) - Experience using Crowdstrike, Cloudflare, FirePower, Splunk, ELK, Imperva, Syslog, packet capture, and Windows Event Log tools and similar tools - Knowledge of current hacking techniques, malicious code trends, botnets, exploits, malware, DDoS, and data breach events - Strong knowledge of Microsoft Windows - Experience automating security tasks, including scripting, programming and/or SecDevOps - Experience working with global teams



  • Bengaluru, India Insight Global Full time

    Required Skills & Experience7-10 years of experience in a SOC or cybersecurity operations role.Proficiency with Secureworks Taegis and Microsoft Defender (Endpoint, Identity, Cloud), including rule tuning, log analysis, and case management.Experience with SIEM tools (e.g., Splunk, QRadar, Elastic Stack) and SOAR platforms.Strong understanding of TCP/IP, DNS,...


  • Bengaluru, India Insight Global Full time

    Required Skills & Experience7-10 years of experience in a SOC or cybersecurity operations role.Proficiency with Secureworks Taegis and Microsoft Defender (Endpoint, Identity, Cloud), including rule tuning, log analysis, and case management.Experience with SIEM tools (e.g., Splunk, QRadar, Elastic Stack) and SOAR platforms.Strong understanding of TCP/IP, DNS,...


  • Bengaluru, India Insight Global Full time

    Required Skills & Experience7-10 years of experience in a SOC or cybersecurity operations role.Proficiency with Secureworks Taegis and Microsoft Defender (Endpoint, Identity, Cloud), including rule tuning, log analysis, and case management.Experience with SIEM tools (e.g., Splunk, QRadar, Elastic Stack) and SOAR platforms.Strong understanding of TCP/IP, DNS,...


  • Bengaluru, India Insight Global Full time

    Required Skills & Experience7-10 years of experience in a SOC or cybersecurity operations role.Proficiency with Secureworks Taegis and Microsoft Defender (Endpoint, Identity, Cloud), including rule tuning, log analysis, and case management.Experience with SIEM tools (e.g., Splunk, QRadar, Elastic Stack) and SOAR platforms.Strong understanding of TCP/IP, DNS,...


  • Bengaluru, India Insight Global Full time

    Required Skills & Experience 7-10 years of experience in a SOC or cybersecurity operations role. Proficiency with Secureworks Taegis and Microsoft Defender (Endpoint, Identity, Cloud), including rule tuning, log analysis, and case management. Experience with SIEM tools (e.g., Splunk, QRadar, Elastic Stack) and SOAR platforms. Strong understanding of TCP/IP,...


  • Bengaluru, India Insight Global Full time

    Required Skills & Experience 7-10 years of experience in a SOC or cybersecurity operations role. Proficiency with Secureworks Taegis and Microsoft Defender (Endpoint, Identity, Cloud), including rule tuning, log analysis, and case management. Experience with SIEM tools (e.g., Splunk, QRadar, Elastic Stack) and SOAR platforms. Strong understanding of TCP/IP,...


  • Bengaluru, India Insight Global Full time

    Required Skills & Experience - 7-10 years of experience in a SOC or cybersecurity operations role. - Proficiency with Secureworks Taegis and Microsoft Defender (Endpoint, Identity, Cloud), including rule tuning, log analysis, and case management. - Experience with SIEM tools (e.g., Splunk, QRadar, Elastic Stack) and SOAR platforms. - Strong understanding of...


  • Bengaluru, India Insight Global Full time

    Required Skills & Experience 7-10 years of experience in a SOC or cybersecurity operations role. Proficiency with Secureworks Taegis and Microsoft Defender (Endpoint, Identity, Cloud), including rule tuning, log analysis, and case management. Experience with SIEM tools (e.g., Splunk, QRadar, Elastic Stack) and SOAR platforms. Strong understanding of TCP/IP,...


  • Bengaluru, India Insight Global Full time

    Required Skills & Experience- 7-10 years of experience in a SOC or cybersecurity operations role.- Proficiency with Secureworks Taegis and Microsoft Defender (Endpoint, Identity, Cloud), including rule tuning, log analysis, and case management.- Experience with SIEM tools (e.g., Splunk, QRadar, Elastic Stack) and SOAR platforms.- Strong understanding of...


  • Bengaluru, India Tata Consultancy Services Full time

    Job Description TCS has been a great pioneer in feeding the fire of Young Techies like you. We are a global leader in the technology arena and there's nothing that can stop us from growing together. TCS Hiring for SOC Analyst/ Admin Required Technical Skill Set: SOC, SIEM, EDR Tools Desired Experience Range: 4+ years in IT field Joining Location: PAN India...