Job Description (Posting). 'Job Description for Incident Responder/Threat Hunter HCL CSFC provides a superior foundation for building a professional career - a place for people to learn, to achieve and grow. A philosophy that balances personal lifestyles, perspectives and needs is an important part of our culture. Candidate Persona Ability to work with very large and complex network. Self-motivated individual and creative thinker who will take ownership of tasks and projects, able to work with the team, and manages tasks effectively and has a proven track record of consist and organized outputs. The ideal candidate will demonstrate an eagerness to understand complex problems and requirements, an aptitude for translating these problems into workable designs and solutions, and will possess a keen eye for detail. This position is based in Noida, India Skills Required 8+ years for L3: Hands-on experience in 2 or more of the SIEM Analysis and SIEM content management areas Having knowledge/experience on any SIEM tools or Experience on IDS (Intrusion Detection systems) platform and Network Security roles. Exposure to Mitre framework and equivalent, Hands on experience in EDR platforms and threat analysis, threat hunting/incident response experience. Experience and knowledge in Network security/ System Security/ Endpoint Security. Experience of Event Monitoring and analysis and escalations. Provide inputs for content management. Experience on Monthly, Weekly and daily reporting. Willing to work on 24/7 operations. Review SIEM escalated incidents and qualify true positives Provide a monthly trend and security analysis summary report Provide SIEM event/Incident analytics, Threat Hunting / Security Analysis support Provide log analysis summary and recommendations on detection/protection of incidents Perform advanced triages and work in collaboration with resolved groups, third party or with designated customer contacts Liaise between cross functional teams and assist in formulating security incident response report Advocate protection and mitigation strategies to be implemented from lessons learnt exercises Expertise experience in SIEM Platform Management - Devo Soft skills Shall have good verbal/written communication skills Should be willing to work in 24x7 environments From time to time travel opportunities may be assigned Incumbent should carry continual system improvement mindset and able to demonstrate in work. Client facing technical analysis report and presentation skills' (1.) To independently resolve tickets and esnure that the agreed SLA of ticket volume and time are met for the team. (2.) To provide support for on call escalations orL3 level support and doing incident and problem management (3.) Work on value adding activities such Knowledge base update and management, Training freshers, coaching analysts and conducting interviewsorparticipation in hiring drives. (4.) To adhere to quality standards, regulatory requirements and company policies (5.) To ensure positive customer experience and CSAT through First Call Resolution and minimum rejected resolutions or Reopen Cases (6.) To participate or contribute on EN business in creation of proposals to drive Service improvement plans. Qualification B-Tech Skill (Primary) INFORMATION SECURITY-SOC ANALYST-SECURITY EVENT ANALYSIS
