SOC Analyst

RDQ426R107

The SOC team’s mission is to continuously monitor and respond to security alerts to maintain a secure environment and protect Databricks assets, customer data, and infrastructure from threats through swift and effective action. You will be working as a SOC analyst and will be reporting to a manager in your region. You will be helping the organisation to quickly respond to security threats by continuously monitoring security alerts.

The Impact you will have:

• Monitor, detect and respond to security threats and risks to the organisation.
• You will triage and respond to security events and alerts by understanding existing logs, correlating from multiple sources during an investigation.
• You will be a part of a distributed 24x7 hours operation team and are expected to work on 2 rotational shifts. Shift 1: 6 am to 2 pm IST and Shift 2: 2 pm to 10 pm IST.
• You will build or enhance automation to improve the alerts triage and response.
• Adhere to the defined SOP and continuously initiate improvements to drive maturity.
• You will track and document alerts from initial detection to resolution.
• You will be working closely with the SIRT team for escalation and incident response.
• Solicit and receive feedback from peers and other teams, and are eager to find ways to continuously improve.

What we look for:

• Bachelor's Degree AND 3+ years of work experience in a Security operations centre as an analyst.
• Strong oral and written communication skills, customer-centric attitude and ability to work in a culturally diverse environment.
• Cloud Security Essentials knowledge required in at least 1 of AWS, GCP or Azure.
• Should be able to write SQL, Python code to build or manage automations and familiarity with code-versioning tools like Git is essential for this role.
• Understanding of network and system components including SaaS in an enterprise environment is necessary for this role.