SOC Analyst
Summary
SOC Analyst in Resillion's cybersecurity services team, remote from Bangalore: monitors client environments via Microsoft Sentinel, performs root-cause analysis of security incidents, reviews threat intelligence, runs vulnerability scanning, and tunes detection rules and playbooks, working rotational shifts.
About Resillion
Resillion is a global provider of digital assurance, cybersecurity, and testing services. We help organisations strengthen their security posture, protect critical assets, and deliver high-quality digital solutions. Our teams operate across multiple specialist disciplines, including Digital Forensics, Incident Response, SOC Operations, Quality & Compliance, and Technical Consultancy. We are committed to excellence, continuous improvement, and delivering trusted, customer-focused services that meet the highest professional and accreditation standards.
Job Title: SOC Analyst
Reports to: SOC Lead
Location: Remote- Bangalore
Direct Reports: No
Department: Cyber
Key responsibilities:
- Analyse security incidents to identify the root cause.
- Investigate, document, and report on information security issues and emerging trends.
- Analyse Threat Intelligence sources for proactive identification of emerging threats.
- Participate in evaluating the security of monitored infrastructure systems and take part in recommending additional security solutions where appropriate.
- Participate in improving internal incident response processes.
- Assist with the creation and maintenance of Playbooks and Runbooks.
- Recommend enhancements to SOC security process, procedures, and policies.
- Provide vulnerability management and monitoring service to customers through vulnerability scanning tools.
- Integrate and share information with other analysts and other teams.
- Assist with reporting and documentation work as needed.
Required Skills and Qualifications
- Security monitoring experience with one or more SIEM technologies which is Microsoft Sentinel
- Tuning of SIEM environment and creation of additional monitoring rules.
- Strong understanding of networking principles including TCP/IP, WANs, LANs, and commonly used Internet protocols.
- Strong understanding of Windows, Linux and cloud technologies.
- Good understanding of security solutions including SIEMs, Web Proxies, Anti-Virus, Firewalls, VPN, authentication providers and mechanisms, encryption, IPS/IDS.
- Good understanding of security incident management, malware management and vulnerability management processes.
- Attention to detail and quality.
- Should have MSSP Experience along with strong communication skills
- Comfortable to work in Rotational shifts
Desirable Skills and Qualifications
- AZ-500 Microsoft Azure Security Technologies and/or SC-200 Microsoft Security Operations Analyst
- Knowledge of Microsoft Kusto Query Language (KQL)
- Knowledge of CrowdStrike Falcon
- Prior experience with handling or managing Cyber Incident Response (NIST)
- Familiarity with ITIL practices regarding incident, problem and change management
Why Join Us?
Gain hands-on experience with industry-leading security tools like Microsoft Sentinel and Microsoft Defender. Work on real-world cyber security incidents, threat detection, and security monitoring. Learn from experienced SOC professionals and accelerate your cyber security career. Access continuous learning, certification support, and growth opportunities. Be part of a collaborative and innovative team focused on protecting businesses from evolving cyber threats.