Incedo Hiring for 4b Tier 2 Sme /senior Analyst (soc L2) at Gurgaon, Haryana, India Full Time

Job Description

Company Overview Company Overview
Incedo is a US-based consulting, data science and technology services firm with over 2,500 people helping clients from our six offices across US and India. We help our clients achieve competitive advantage through end-to-end digital transformation. Our uniqueness lies in bringing together strong engineering, data science, and design capabilities coupled with deep domain understanding. We combine services and products to maximize business impact for our clients in telecom, financial services, product engineering and life science & healthcare industries.
Working at Incedo will provide you an opportunity to work with industry leading client organizations, deep technology and domain experts, and global teams. Incedo University, our learning platform, provides ample learning opportunities starting with a structured onboarding program and carrying throughout various stages of your career. A variety of fun activities are also an integral part of our friendly work environment. Our flexible career paths allow you to grow into a program manager, a technical architect or a domain expert based on your skills and interests.
Role Description
Role Description:
Incedo is seeking for CDC Senior Analyst (CDC/SOC L2) to support threat monitoring, detection, event analysis, incident response/reporting, forensics, and threat hunting activities for its Cyber Defense Center (SOC), which is a 24/7 environment. The CDC/SOC L2 Analyst must be able to rapidly respond to security incidents and should have 4 to 8 years of relevant experience in Cyber security incident response area. Should have deeper understanding with some hands-on experience on enterprise IT infra components such as advanced firewalls, IPS/IDS/WIPS/HIPS, routers/switches, TACACS, VPN, proxy, AV, domain controllers, DNS, DHCP, multi factor authentication, virtualization, Email systems/security, DLP etc. along with cloud environments (AWS, Azure etc.).
Role and responsibilities

• Providing incident response/investigation and remediation support for escalated security alerts/incidents (should be flexible to work in 24*7 environment)
• Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack
• Performing comprehensive computer monitoring, identifying vulnerabilities, Target mapping and profiling.
• Provides support for complex computer/network exploitation and defense techniques to include deterring, identifying and investigating computer and network intrusions
• Provides technical support for forensics services to include evidence seizure, computer forensic analysis and data recovery, in support of computer crime investigation. Researches and maintains proficiency in open and closed source computer exploitation tools, attack techniques, procedures and trends.
• Performs research into emerging threat sources and develops threat profiles. Keep updated on latest cyber security threats.
• Demonstrates strong evidence of analytical ability and attention to detail. Has a broad understanding of all stages of incident response.
• Has a sound understanding of SIEM, PAM, CASB, EDR, other threat detection platforms and Incident Response tools.
• Has a systematic, disciplined and analytical approach to problem solving

Technical skills requirements

• 4-6 years of overall experience in area of Systems/Network/Information Security and minimum 3 years in SOC/MSS services
• Professional/Technical Certifications (e.g. CEH, OCSP, Security+, CCSE, CCSP, CISSP, etc.) desirable.

Nice-to-have skills

• Certification in any of the SIEM platforms.
• Experience SIEM Monitoring solutions [Qradar, ArcSight, Splunk, etc.,] and a variety of other security devices found in a SOC environment

Qualifications

• 5+ years of total experience, including experience of driving large scale programs.
• B.Tech /B.E/M.Tech or MCA degree from a reputed university. Computer science background is preferred
• Security Certifications Preferred (Including but not limited to the following certifications): Certified Incident Handler (GCIH), GDAT, OSCP, CHFI, CEH.

Company Value Company Value
We are an Equal Opportunity Employer. We value diversity at Incedo. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.