Senior SOC Analyst

Products include endpoint protection, email security and a cloud posture management platform. Cotter Labs protects more than 4,000 organisations, from regional hospitals to Fortune 500 manufacturers.

We are backfilling a position after an internal move. The Information Security team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. We hire in India through an employer of record, so this is a regular full-time job with local payroll and statutory benefits. Expect to work a schedule that overlaps with US Eastern business hours until about noon ET. Please make sure you have dependable internet and backup power.

In this role you will

• Document incidents with timeline, impact and root cause
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners
• Check threat intelligence feeds and IOCs against our environment
• Review firewall, proxy, VPN and authentication logs for suspicious activity
• Help with user access reviews and offboarding audits
• Tune noisy detection rules with the security engineering team
• Write and update SOC runbooks and playbooks
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM

What you'll need

• 6+ years in an SOC, security analyst or IT security role
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols
• Clear written communication for incident tickets and reports

Schedule: Second shift, 2:00 PM to 10:30 PM, Monday to Friday

Why work with us

Salary: ₹26,50,000 - ₹33,00,000 pa

• Annual team retreat
• Home office setup budget
• Performance bonus
• Paid sick days
• Public holidays observed per your country

Candidates must be eligible to work in India.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Cotter Labs.