SOC Analyst - Remote

We work with Fortune 500 companies, federal agencies and large health systems. Engagement teams range from three people to more than 200 on multi-year transformation programs.

The position

Pandey Consulting Group is hiring for the SOC Analyst - Remote role to monitor, investigate and respond to security alerts across our environment. The Cyber Defence team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter.

Main duties

• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners.
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM.
• Escalate confirmed incidents and follow the incident response plan.
• Check threat intelligence feeds and IOCs against our environment.
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint.
• Write and update SOC runbooks and playbooks.

Minimum qualifications

• Clear written communication for incident tickets and reports.
• Experience reading Windows Event Logs, Sysmon and Linux logs.
• Ability to work shifts, including some nights, weekends or holidays as scheduled.
• Must be able to pass a background check.
• Familiarity with the MITRE ATT&CK framework.
• Working knowledge of SIEM and EDR tools.

Preferred

• SOAR platforms such as Splunk SOAR, Cortex XSOAR or Tines.
• CySA+, GCIH, GCIA or BTL1 certification.

Schedule: Rotating 12-hour shifts on a 2-2-3 schedule, including nights

Compensation: ₹11,00,000-₹14,00,000 per annum

Benefits

• Health insurance for you and your family.
• Provident fund.
• Paid leave.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Pandey Consulting Group LLP.