SOC Analyst

Regulators examine us regularly, and risk, audit and compliance make up a large part of the staff. Digital adoption is high, and over 70 percent of transactions now happen on mobile. Most lenders have lived in the area for decades and know their borrowers.

Role overview:

We are backfilling a position after an internal move. Security analyst role covering detection, incident response and some compliance work. Good fit for someone two or three years into security. This role is fully remote within India. Equipment is provided, including a laptop.

What you'll do:

• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM.
• Write and update SOC runbooks and playbooks.
• Report on security awareness training and phishing simulation results.
• Escalate confirmed incidents and follow the incident response plan.
• Analyse reported phishing emails, check headers and URLs, and purge malicious messages.
• Document incidents with timeline, impact and root cause.
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint.

What you need:

• 2-4 years in an SOC, security analyst or IT security role.
• Familiarity with the MITRE ATT&CK framework.
• CompTIA Security+ or equivalent (or ability to obtain within six months)
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols.
• Experience reading Windows Event Logs, Sysmon and Linux logs.

Nice to have:

• Prior help desk or network administration experience.
• KQL or SPL query writing.
• Malware analysis in a sandbox.

Schedule: Four 10-hour shifts, Sunday to Wednesday, 6:00 AM to 4:30 PM

Compensation and benefits:

• Health insurance for you and your family.
• Provident fund.
• Paid leave.

Candidates must be eligible to work in India.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Paschim National Bank.