SOC Engineer L3

ITHR Technologies Consulting LLC

IndiaremotePosted 14 days ago

Skill Required

SOC-EngineerSecurity-EngineerCybersecurity-EngineerSecurity-AnalystSIEM-AdministratorSOC-L3-AnalystL3-SOC-AnalystSOC-EngineeringCloud SecuritytroubleshootingautomationdevelopingObservabilitysecurityCloudSIEMandFulltime

Key highlights

Annual compensation of 12 lakhs
5 to 6 years of experience
Remote working
Level 2 engineer moving to L3

Role overview

A Level 3 SOC Engineer is usually considered a slightly senior position, focusing on the most complex security challenges, strategy development, and leadership within the SOC team.

Responsibilities

Implement and administer the Security Information and Event Management (SIEM) system, network security hardware, and software.
Identify system vulnerabilities and develop strategies to mitigate them.
Develop solutions to address identified vulnerabilities.
Create and maintain standard operating procedures and protocols to ensure consistent and secure operations.
Handle device onboarding and manage logs effectively by developing and maintaining log parsers to ensure comprehensive monitoring.
Provide installation, maintenance, upgrades, and troubleshooting for the SIEM solution and its components across all functional departments.
Take on varied responsibilities, including covering for absences or balancing workload, which may involve working in different areas of the SOC.
Detect and respond to malicious activities on cloud systems, SaaS, workstations, servers, and networks, ensuring comprehensive security coverage.
Optimize threat detection tools for DLP, SIEM, EDR, antivirus, cloud security, and intrusion detection systems, among other technologies, to enhance security posture.
Review and respond to escalated security events, ensuring timely and effective incident resolution.
Engage in proactive threat hunting to identify and mitigate potential threats before they impact the environment.
Write detection signatures, tune systems and tools, develop automation scripts, and create correlation rules to improve detection and response capabilities.
Maintain up-to-date knowledge of adversary tactics, techniques, and procedures to anticipate and counteract potential threats.
Conduct in-depth forensic analysis on affected systems and coordinate with third-party resources as needed for advanced investigations.
Provide timely and relevant updates to stakeholders and decision-makers, ensuring they are informed of current security postures and incident impacts.