SOC Engineer
- Softtek
- 2 - 4 years
- Bengaluru
- 8 months ago
- Email to a friend
- Report this job
Job Description
- 3 yoe as L1 SOC Engineer, with working knowledge of ElasticSearc
- Act as a first responder, L1 SOC Engineer is responsible for monitoring security tool in the SIEM, validate that the tools are working properly and respond to security events according with the alerts priority and risk.
Roles and Responsibilities
Main responsibilities and tasks:
- Asset discovery.
- Monitor security tools in search of alerts.
- Follow SOP to address the security events.
- Discard false positives
- Suggest exclusions to avoid false positives, tunning of alarms and correlation rules to the security engineer.
- Prioritize security events based on the fast impact triage method.
- Escalate the security events in case they are not a false positive.
- Participate in purple team activities.
- Monitoring and managing alerts in Elastic Security SIEM, including detection rule optimization.
- Advanced or basic alert tuning (depending on specialist role experience), adjusting thresholds and filters to reduce false positives.
- Automation of processes using Elastic Stack (Elasticsearch, Logstash, Kibana, Beats) and additional tools such as ElastAlert or Watcher.
- Add sources to Elastic Search
- Development of advanced dashboards and visualizations in Kibana to enhance event correlation.
- Security alert investigation and generation of incident reports based on log analysis.
- Optimization of Elasticsearch queries to improve search and correlation performance.
- Support in managing the Elastic Stack, including configuring data pipelines.
- Collaboration with the SOC team to improve monitoring and incident response efficiency.
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Security Engineer / AnalystEmployement Type: Full timeContact Details:
Company: SofttekLocation(s): Bengaluru
Keyskills: security analysis development cyber security network security elk soc information security beats siem monitoring vulnerability assessment incident response elastic search logstash security event correlation penetration testing kibana log analysis triage
Similar positions
Softtek
About Softtek: Softtek is over 30 years old Mexico based Software Company with around 8000 employees. We have 39 offices in North America, Latin Europe and Asia with 10 Global Delivery Centers in the US, Mexico, China, Brazil, Argentina, Spain and India. We have around 300 customers in over 29 count...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in