SOC Analyst

SOC Analyst (L-2)

 Implementation, Management and monitoring all cyber security Solutions/ Devices/components.
 Deployment and Installation of all in scope solutions and their monitoring
 Upgradation of all in scope solutions and their monitoring
 Identification of security events that are true positive before qualifying event as an incident.
 Periodic and planned update of firmware/definitions/patches of all security Solutions/components/ devices and other tools.
 Fine tuning configuration of the security solutions/components for obtaining optimum usage of the system as per the Bank's requirement.
 Periodically evaluate the access device configurations and patch levels to ensure that all access points, nodes between (i) different VLANs in the Data Centre/DR/NDR/HO/CO other locations
 (ii) LAN / WAN interfaces (iii) Banks network to external network and extranet are securely configured.
 Closely monitoring of overall health of the all solutions and submit reports to the Bank with related parameters on a daily basis.
 Application whitelisting for desktops and Servers
 Deployment of various agents for endpoints and servers and maintenance and monitoring of the same
 Periodically provide reports for all availability and performance parameters along with log of all issues that have been raised and closed/Pending for closure. The frequency of these reports would be Daily, Weekly, Monthly, Quarterly and Yearly as per Bank's requirement. Apart from the reports on each availability and performance measurement parameter, the reporting should
also include but not limited to: Utilization of Session, queue, CPU, RAM, Disk space, I/O (Peak and Average) etc.
 Mitigation and compliance of Information security/cyber security /RBI IT Examination audit points/ VAPT Audit Points/ Internal IS audit Points/ Points pertaining any other internal/external Audit undertaken in the Bank.
 Management of VAPT Tool deployed in the Bank including but not limited to Performing Scans, Management of the system, Updating of plugins and patches, etc.
 Configuration of application control functionality in Firewall/WAF/NIPS and review and monitor the same.
 Making required setup and monitoring the traffic to find out security threats/incidents during the course of Cyber Drill conducted by the Bank or any external agency or regulatory bodies.
 FM Engineer should maintain the backup of all necessary files including configuration file, in line with Bank's Information security policy /Cyber security policy. Restoration testing process of the backup has to be carried out and recorded on periodic basis all applicable security solutions.
 Solutions to be upgraded to recommended levels by OEM immediately on availability of upgrade/patches.
 Collect, correlate and review all incidents reported by all other security devices (e.g., Firewalls,
 IPS, vulnerability assessment, etc) in coordination with SIEM team
 Analysis of events & alerts generated by the security devices
 Analysis of event correlation logs in coordination with SIEM team
 Analysis of traffic statistics as reported in the firewall connections' information

We are a fun-loving, energetic and fast growing company that breathes innovation. We strive to give an unparalleled experience to our customers and win them for life. One in every 24 people on this planet is served by Airtel.

Here, we put our customers at the heart of everything we do. We encourage our people to push boundaries and evolve from skilled professionals of today to risk-taking entrepreneurs of tomorrow.

We hire people from every realm and offer them opportunities that encourage individual and professional growth. We are always looking for people who are thinkers & doers; people with passion, curiosity & conviction; people who are eager to break away from conventional roles and do 'jobs never done before' .