Associate

Job description

**About Company:** BDO is a global network of professional services firms with a presence in over 166 countries, revenue of over USD 14 billion, and experience of over 60 years. Its a leading service provider for the mid-markets with client service at its heart. BDO India Services Private Limited (or BDO India) is the India member firm of BDO International. BDO India offers strategic, operational, accounting and tax, and regulatory advisory & assistance for both domestic and international organizations across a range of industries. BDO India is led by more than 300+ Partners & Directors with a team of over 10,000 professionals operating across 14 cities and 20 offices. We expect to grow sizably in the coming 3-5 years, adding various dimensions to our business and multiplying and increasing the current team size multi-fold. **Title: SOC Associate** **Location:** Gurgaon, Magnum Global Park **Team:** BAS Cyber (SOC) **Summary:** We are seeking a team lead (Consultant) SOC analyst for 24x7 operations with 6-8 years of hands-on experience in cybersecurity monitoring, security operations and understating of networking, operating systems along with basics of cyber investigations and security best practices. SOC Con would be responsible for handling escalated alerts from team in the organization. In addition, they are expected to support Threat Hunting Activities, identification of new content, building automation business requirements as part activities. **Key Responsibilities:** - 6 to 8 years of work experience in relevant domain. - Support round-the-clock monitoring of security alerts and events using SIEM platform. Act as Team lead and manage analysts and A-cons working in MSS - Support IR activities as per customer requirements to support investigation logs from various log and work with forensic partners. - Support onboarding of log sources to SIEM platform and run periodic check on correct logs being received by platform. - Build content on SIEM based on business requirements of customer. - Support cyber technologies like Firewalls / Proxy / DLP / WAF / DDoS / NIPS / HIPS / XDR / SOAR - Deploy technologies based on approved architecture and maintain as per SLAs agreed with customers. - Maintain and support operational integrity of SOC toolsets and customer deployed tools as per agreed scope and SLA’s - Valid CEH certification is required. **Education & Qualification:** - Bachelor’s degree in engineering, Computer Science, Information Security, or a related discipline. A master's degree is desirable. - Should have expert level skills and OEM certification on minimum three cyber technologies listed XDR / Firewalls / Proxy / WAF / DDoS / NIPS / HIPS / SOAR / DLP