CD&E -SOC L1 Support- Associate 2 - Bangalore

Job Description

As an Associate 2 at PwCs Advisory Acceleration Centre, you will work as part of a team of problem solvers, assisting in solving complex business issues from strategy to execution. Your responsibilities at this management level include:- Using feedback and reflection to develop self-awareness, personal strengths, and address development areas.- Delegating tasks to others to provide stretch opportunities and coaching them to deliver results.- Demonstrating critical thinking and the ability to bring order to unstructured problems.- Utilizing a broad range of tools and techniques to extract insights from current industry or sector trends.- Reviewing your work and that of others for quality, accuracy, and relevance.- Knowing how and when to use tools available for a given situation and being able to explain the reasons for this choice.- Seeking and embracing opportunities that provide exposure to different situations, environments, and perspectives.- Using straightforward communication in a structured way when influencing and connecting with others.- Being able to read situations and modify behavior to build quality relationships.Roles & Responsibilities:- Cyber Threat & Device Monitoring Analyst (Tier 1): As an Associate, you will work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. Your responsibilities will include: - Following a 24x7 shift-based schedule to continuously monitor the alert queue. - Triaging security and device alerts. - Receiving phone calls from clients, creating necessary tickets for incidents or requests, and channeling them to the required team for action. - Collecting data and context necessary to initiate investigations over to level 2 security analysts. - Following alerts and incidents playbooks/runbooks. - Maintaining access to all security tools required for security investigation. - Being primarily responsible for security monitoring, detection, response, and client care. - Ensuring incident identification, assessment, reporting, communication, mitigation, and monitoring. - Ensuring compliance with SLAs, process adherence, and process improvements to achieve operational objectives. - Revising and developing processes to strengthen the current Security Operations Framework, reviewing policies, and highlighting challenges in managing SLAs. - Coordinating with stakeholders, building and maintaining positive working relationships with them.Experience & Skills:- Proficiency in Incident Management and Response.- Experience in security device management and multiple SIEM platforms.- In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management, etc.- Experience in an MSSP environment.- Knowledge of various operating system flavors including but not limited to Windows, Linux, Unix.- Knowledge of applications, databases, middleware to address security threats.- Proficiency in the preparation of reports, dashboards, and documentation.- Excellent communication and leadership skills.- Experience in performing vendor management.- Ability to handle high-pressure situations with key stakeholders.- Good analytical skills, problem-solving, and interpersonal skills.- CISSP and GIAC certifications are preferred.- A demonstrated commitment to valuing differences and working alongside diverse people and perspectives.Qualifications:- A Bachelors Degree in a relevant area of study with a preference for Computer Science or Computer Engineering.- Minimum of 2 years in Information Technology.- Minimum of 2 years in Information Security.,

Keyskills :
Incident ManagementRisk ManagementOperating SystemsWindowsLinuxUnixDatabasesMiddlewareDashboardsDocumentationCommunication SkillsLeadership SkillsVendor ManagementAnalytical SkillsInterpersonal SkillsResponseSecurity Device ManagementSIEM