Security Operations Center Analyst - Yubi - Chennai, India
Yubi is seeking a dedicated Security Operations Center (SOC) Analyst to join our 24/7 Cyber Defence Centre (SOC) team in Chennai, India. This critical role involves managing and responding to security incidents, protecting enterprise and client data, and acting as the first line of defense against potential cyber threats. You will be responsible for monitoring security systems, analyzing alerts, escalating incidents, and remediating security issues across cloud environments (AWS, GCP, Azure).
Key Responsibilities
- Serve as a vital member of the cybersecurity function, ensuring the security and privacy of enterprise and client data.
- Provide continuous 24x7 monitoring of the organization's security posture.
- Act as the initial responder to potentially malicious events.
- Escalate confirmed security incidents to SOC leads and coordinate with relevant teams for prompt resolution.
- Monitor and remediate alerts from cloud platforms including AWS, GCP, and Azure.
- Develop methodologies for identifying suspicious and anomalous activities.
- Create and refine response playbooks for various security scenarios.
- Perform manual analysis of log files to detect attack patterns.
- Assist in developing new methods for threat detection and triage.
- Conduct threat hunting by analyzing security system logs, tools, and data sources to identify enterprise attacks, report irregularities, and suggest improvements for detection rules and system tuning.
Desired Skills and Experience
- Bachelor's Degree in Computer Science with 1-7 years of experience in a SOC environment.
- Proficiency in handling alerts from AWS and/or Azure.
- Proven experience in critical incident analysis and response.
- Excellent written and verbal communication skills, with an ability to identify and recommend improvements to IT security.
- Strong knowledge of Windows server-based systems including DNS, DHCP, IIS, NPS, RDS, DFS, Hyper-V, etc.
- Experience with suspicious URL blocking, sandboxing, and malware analysis.
- Solid understanding of SIEM, PAM, CASB, EDR, other threat detection platforms, and Incident Response tools.
- Familiarity with authentication standards such as SAML and OAuth.
- Capability to perform forensic analysis on laptops, mobile devices, and servers.
- Experience with advanced SIEM solutions is advantageous.
- Working knowledge of compliance standards like ISO27001, PCI-DSS, and Cyber Essentials Plus.
Preferred Qualifications
- Bachelor's Degree in Computer Science with a minimum of 2 years of related experience in a SOC.
- Experience managing security issues and incidents within a Security Operations Centre.
- Relevant security certifications are preferred.
- Excellent written and verbal communication skills, demonstrating an ability to recognize and implement IT security enhancements.
