Hi Greeting from RCV Technologies,
We are looking for a skilled and proactive SOC Analyst with 3–5 years of experience to join our cybersecurity team. The ideal candidate will be responsible for monitoring security events, investigating potential threats, responding to incidents, and strengthening the organization's overall security posture.
Key Responsibilities
- Monitor and analyse security alerts and events from SIEM, EDR, firewall, IDS/IPS, and other security tools.
- Investigate and triage potential security incidents and determine their severity and impact.
- Perform log analysis and event correlation to identify suspicious activities and potential threats.
- Respond to security incidents in accordance with established incident response procedures and playbooks.
- Investigate indicators of compromise (IOCs), including malicious IPs, domains, URLs, hashes, and suspicious processes.
- Identify and analyse phishing, malware, brute-force, privilege escalation, and other common attack attempts.
- Escalate critical or complex security incidents to the appropriate teams.
- Conduct basic threat hunting and proactively identify suspicious patterns or anomalies.
- Prepare detailed incident reports, investigation findings, and security documentation.
- Collaborate with IT, network, infrastructure, and application teams for incident remediation.
- Stay updated on emerging threats, vulnerabilities, attack techniques, and cybersecurity trends.
- Contribute to improving SOC processes, detection rules, monitoring capabilities, and security playbooks.
Required Skills
- 3–5 years of experience in a SOC, Security Operations, Cybersecurity, or Incident Response role.
- Hands-on experience with SIEM tools such as Splunk, Microsoft Sentinel, QRadar, or similar platforms.
- Strong understanding of Security Monitoring, Incident Detection, Incident Response, and Log Analysis.
- Knowledge of Windows and Linux security events and logs.
- Good understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, IDS/IPS, and network security concepts.
- Familiarity with EDR/XDR solutions and endpoint security monitoring.
- Understanding of MITRE ATT&CK, Cyber Kill Chain, OWASP, and common attack techniques.
- Ability to investigate phishing emails, malware alerts, suspicious authentication activity, and network anomalies.
- Knowledge of IOC analysis and threat intelligence.
- Strong analytical, problem-solving, and communication skills.
Good to Have
- Experience with SOAR platforms and security automation.
- Familiarity with CrowdStrike, Microsoft Defender, or similar EDR solutions.
- Basic knowledge of Python, PowerShell, or Bash scripting.
- Exposure to cloud security monitoring across AWS, Azure, or GCP.
- Relevant certifications such as Security+, CEH, CySA+, GCIH, or equivalent.
--
Riya Sharma | Talent Acquisition Executive
RCV Technologies
Hi Greeting from RCV Technologies,
We are looking for a skilled and proactive SOC Analyst with 3–5 years of experience to join our cybersecurity team. The ideal candidate will be responsible for monitoring security events, investigating potential threats, responding to incidents, and strengthening the organization's overall security posture.
Key Responsibilities
- Monitor and analyse security alerts and events from SIEM, EDR, firewall, IDS/IPS, and other security tools.
- Investigate and triage potential security incidents and determine their severity and impact.
- Perform log analysis and event correlation to identify suspicious activities and potential threats.
- Respond to security incidents in accordance with established incident response procedures and playbooks.
- Investigate indicators of compromise (IOCs), including malicious IPs, domains, URLs, hashes, and suspicious processes.
- Identify and analyse phishing, malware, brute-force, privilege escalation, and other common attack attempts.
- Escalate critical or complex security incidents to the appropriate teams.
- Conduct basic threat hunting and proactively identify suspicious patterns or anomalies.
- Prepare detailed incident reports, investigation findings, and security documentation.
- Collaborate with IT, network, infrastructure, and application teams for incident remediation.
- Stay updated on emerging threats, vulnerabilities, attack techniques, and cybersecurity trends.
- Contribute to improving SOC processes, detection rules, monitoring capabilities, and security playbooks.
Required Skills
- 3–5 years of experience in a SOC, Security Operations, Cybersecurity, or Incident Response role.
- Hands-on experience with SIEM tools such as Splunk, Microsoft Sentinel, QRadar, or similar platforms.
- Strong understanding of Security Monitoring, Incident Detection, Incident Response, and Log Analysis.
- Knowledge of Windows and Linux security events and logs.
- Good understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, IDS/IPS, and network security concepts.
- Familiarity with EDR/XDR solutions and endpoint security monitoring.
- Understanding of MITRE ATT&CK, Cyber Kill Chain, OWASP, and common attack techniques.
- Ability to investigate phishing emails, malware alerts, suspicious authentication activity, and network anomalies.
- Knowledge of IOC analysis and threat intelligence.
- Strong analytical, problem-solving, and communication skills.
Good to Have
- Experience with SOAR platforms and security automation.
- Familiarity with CrowdStrike, Microsoft Defender, or similar EDR solutions.
- Basic knowledge of Python, PowerShell, or Bash scripting.
- Exposure to cloud security monitoring across AWS, Azure, or GCP.
- Relevant certifications such as Security+, CEH, CySA+, GCIH, or equivalent.
--
Riya Sharma | Talent Acquisition Executive
RCV Technologies