SOC Analyst L2

Tata Consultancy Services (TCS) is an IT services, consulting, and business solutions organization that has been partnering with many of the world’s largest businesses in their transformation journeys for over 50 years. TCS offers a consulting-led, cognitive-powered, integrated portfolio of business, technology, and engineering services and solutions.

Job Description:

Must Have:

• Good team skills working with teams across geographies
• Expertise in Splunk with the ability to identify tuning recommendations for improved detection and accuracy
• Expert skills in Splunk use-case/rules writing
• Proficient in security incident investigation and threat mitigation
• Strong analytical and problem-solving skills
• Good understanding of operating systems and networking
• Expert understanding of security threats, vulnerabilities, and tools (Firewalls, VPN, IPS, etc.)

Good-to-Have:

• Knowledge of DLP, anti-virus, and anti-malware
• Experience with system tools such as Wireshark and packet analyzers
• Understanding of cloud computing and SaaS models

Responsibilities and Expectations:

• Investigate security events and incidents escalated by SOC Level 1 and Level 2 analysts
• Create SIEM use-cases, correlation rules, and baselines to monitor malicious activity and anomalies
• Collaborate with Splunk Admin to onboard necessary logs
• Integrate Threat Intelligence and other enrichment feeds into the SIEM tool
• Manage major incidents and incident response efforts
• Reduce false positive events by tuning Splunk UseCases
• Provide recommendations for tuning and security standards
• Stay updated on current threats and vulnerabilities and report relevant threats
• Deep understanding of the ATT&CK matrix and experience in building use cases and SOPs
• Knowledge of integrating SOAR tools and creating playbooks and workflows
• Drive the identification, creation, and refinement of the team’s processes and procedures

Language Requirements:

• Proficiency in English is likely expected, but additional language requirements were not specified.