Security Operations Center Analyst

Job Location: Mumbai (Andheri)

Years of Experience: 7+

Budget: 18 to 20 LPA

Mandatory Skill sets: Log Parsing, API Integration, DAM Guardium, QNI, REST API Integration, SOAR

Job Description:

We seek an experienced Subject Matter Expert (IBM Qradar SIEM) to support our missioncritical UAT and Production environments at Mumbai. The ideal candidate will have deep expertise in Log Parsing, API Integration, REST API Integration, SOAR, DAM Guardium, QNI.

Location: Mumbai (Andheri)

Key Responsibilities:

SOC Operations & Monitoring

• Perform continuous monitoring of SIEMDAM platforms across DC & DR.
• Integrate & manage SIEM, SOAR, XDR, IDS/IPS, UEBA, threat intel platforms.
• Monitor trading platforms, APIs, gateways for anomalies.
• Track zerodays, emerging threats, and APT campaigns.

Incident Response

• Lead L3 incident triage, containment, eradication, and recovery.
• Conduct root cause analysis with corrective action planning.
• Coordinate with regulators: SEBI, CERTIn, RBI.
• Conduct cyber drills, red/blue team exercises.

Technology Optimization

• Manage & optimize SOC tools, dashboards, and analytics.
• Drive SOAR automation, ML-based anomaly detection, custom scripts.
• Ensure compliant log management, retention & forensic readiness.
• Align SOC with NOC, fraud monitoring & BCP teams.

Compliance & Reporting

• Ensure alignment with SEBI CSCRF, CERTIn Guidelines, DPDPA, PCI DSS, ISO 27001.
• Submit regulatory incident reports within mandated timelines.
• Support internal/external audits with accurate documentation.
• Create executive dashboards & incident summaries.

Threat Intelligence & Hunting

• Build & maintain a Cyber Threat Intelligence (CTI) function.
• Conduct proactive threat hunting & analyticsdriven detection.
• Work with engineering & architecture teams to enhance detection coverage.

SOC Governance & Team Enablement

• Create SOC SOPs, playbooks, processes using NIST, ISO 27001, MITRE ATT&CK.
• Implement and track SOC Maturity Roadmap.
• Monitor SOC KPIs such as MTTD, MTTR, containment rates, uptime.

Reporting Responsibilities

• Create & publish custom and predefined QRadar reports.
• Deliver automated & manual reports for management and regulatory needs.
• Zero major audit noncompliances (SEBI / CERTIn).
• Reduction in MTTD and MTTR.
• 99%+ SOC availability during cyber incidents.
• Increased percentage of proactively mitigated threats.
• Improved SOC maturity and resilience metrics.

Required Skills

• Strong handson experience with IBM QRadar SIEM & DAM.
• Deep understanding of SOC operations, threat intelligence, and cyber defence.
• Experience in BFSI or financialmarket cyber environments.
• Knowledge of compliance standards & regulatory frameworks.
• Scripting/automation skills (Python / Bash / PowerShell preferred).