Re:Sources India Gurgaon IT
On-siteBengaluru, Karnataka, India
Job Summary
Monitor, analyze, and triage security alerts from SIEM, EDR, and network devices while performing initial incident investigations across Windows, Linux, cloud, and database environments. Proactively hunt for threats using threat intelligence and advanced analytics to uncover stealthy attacks. Develop and optimize security monitoring use cases, correlation rules, and dashboards to enhance detection capabilities. Serve as the primary contact for incident escalations, coordinating with IR teams and stakeholders to provide detailed findings and recommendations. Generate comprehensive security reports, support audit requirements, and maintain runbooks and knowledge base articles. Collaborate with IT operations, development, and compliance teams to drive security hygiene improvements. Stay current with emerging threats, MITRE ATT&CK frameworks, and industry best practices through continuous learning and certifications.
Required Qualifications
- 3–5 years of experience in a Security Operations Center (SOC), Blue Team, or similar cybersecurity role
- Strong understanding of security principles
- Strong understanding of common attack vectors
- Strong understanding of incident response methodologies
- Proficiency with SIEM platforms, including log analysis, rule creation, and dashboard development
- Hands-on experience with EDR solutions for endpoint investigation and response
- Experience monitoring and securing Windows and Linux operating systems
- Experience monitoring and securing firewalls and IDS/IPS solutions
- Experience monitoring and securing databases
- Experience monitoring and securing cloud platforms (AWS, Azure, GCP)
- Full-Time Bachelor's or Master's Degree in Computer Science, Information Technology, Cybersecurity, or a related field
Desired Qualifications
- Network protocols (TCP/IP)
- Cybersecurity frameworks: NIST, MITRE ATT&CK
- Scripting languages: Python, PowerShell
- Certified Ethical Hacker (CEH)
- CompTIA Security+
- AWS Security Certification
- Certified Cloud Security Professional (CCSP)
- Systems Security Certified Practitioner (SSCP)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.