Administrator (Support & Operations)
India
Apply now
Job Description
Administrator (Support & Operations)
Vijayawada, Andhra Pradesh

Job Summary

Job Description (JD) – Cyber Security EDR/SOC Cyber Security Analyst (EDR & SOC)\\\\r\\\\n\\\\r\\\\nJob Title: Cyber Security Analyst – EDR & SOC\\\\r\\\\n Location: Lucknow / Hybrid / Remote\\\\r\\\\n Experience: 3-8 Years (customizable)\\\\r\\\\n Department: Information Security / Cyber Defense\\\\r\\\\n\\\\r\\\\nRole Summary\\\\r\\\\n\\\\r\\\\nWe are seeking a skilled Cyber Security Analyst with hands-on experience in Endpoint Detection & Response (EDR) and Security Operations Center (SOC) operations. The candidate will be responsible for monitoring, detecting, investigating, and responding to cyber security incidents across enterprise environments while ensuring continuous improvement of security controls and threat detection capabilities.\\\\r\\\\n\\\\r\\\\nKey Responsibilities\\\\r\\\\nSecurity Operations Center (SOC)\\\\r\\\\nMonitor security alerts and events from SIEM, EDR, IDS/IPS, Firewalls, Email Security, and Cloud Security tools.\\\\r\\\\nPerform triage, investigation, and remediation of security incidents.\\\\r\\\\nConduct threat hunting and proactive monitoring activities.\\\\r\\\\nAnalyze logs and network traffic to identify suspicious activities.\\\\r\\\\nEscalate critical incidents and coordinate response activities with stakeholders.\\\\r\\\\nDevelop and maintain incident response procedures and playbooks.\\\\r\\\\nSupport vulnerability management and security compliance initiatives.\\\\r\\\\nEndpoint Detection & Response (EDR)\\\\r\\\\nManage and monitor EDR platforms such as Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, Carbon Black, or Trellix.\\\\r\\\\nInvestigate endpoint alerts including malware, ransomware, lateral movement, privilege escalation, and persistence mechanisms.\\\\r\\\\nPerform endpoint isolation, containment, remediation, and recovery actions.\\\\r\\\\nCreate and fine-tune EDR detection rules and alerting mechanisms.\\\\r\\\\nConduct forensic investigations on compromised endpoints.\\\\r\\\\nThreat Intelligence & Hunting\\\\r\\\\nUtilize threat intelligence feeds and MITRE ATT&CK; framework for detection improvements.\\\\r\\\\nPerform IOC (Indicators of Compromise) analysis and threat hunting exercises.\\\\r\\\\nIdentify emerging threats and recommend mitigation strategies.\\\\r\\\\nReporting & Documentation\\\\r\\\\nPrepare incident investigation reports and executive summaries.\\\\r\\\\nMaintain SOC metrics, dashboards, and KPI reports.\\\\r\\\\nDocument lessons learned and drive continuous process improvements.\\\\r\\\\nRequired Skills\\\\r\\\\nTechnical Skills\\\\r\\\\nStrong knowledge of:\\\\r\\\\nSIEM Platforms (Microsoft Sentinel, Splunk, QRadar, ArcSight)\\\\r\\\\nEDR Solutions (Microsoft Defender, CrowdStrike, SentinelOne)\\\\r\\\\nWindows, Linux, and Server Security\\\\r\\\\nFirewalls (Palo Alto, Fortinet, Cisco, Check Point)\\\\r\\\\nIDS/IPS and Network Security Monitoring\\\\r\\\\nEmail Security Solutions\\\\r\\\\nActive Directory and Identity Security\\\\r\\\\nCloud Security (Azure, AWS, Microsoft 365)\\\\r\\\\nSecurity Frameworks\\\\r\\\\nMITRE ATT&CK;\\\\nNIST Cybersecurity Framework\\\\r\\\\nISO 27001\\\\r\\\\nCIS Controls\\\\r\\\\nIncident Response Methodologies\\\\r\\\\nAnalytical Skills\\\\r\\\\nLog analysis and correlation\\\\r\\\\nMalware analysis fundamentals\\\\r\\\\nThreat hunting\\\\r\\\\nDigital forensics basics\\\\r\\\\nRisk assessment\\\\r\\\\nQualifications\\\\r\\\\nBachelor\\\\\\\'s degree in Computer Science, Information Security, or related field.\\\\r\\\\nRelevant certifications preferred:\\\\r\\\\nMicrosoft SC-200 (Security Operations Analyst)\\\\r\\\\nCompTIA Security+\\\\r\\\\nCEH\\\\r\\\\nCySA+\\\\r\\\\nGIAC (GCIA/GCIH)\\\\r\\\\nCrowdStrike Certified Falcon Responder\\\\r\\\\nMicrosoft Defender Certifications\\\\r\\\\nPreferred Experience\\\\r\\\\n3+ years in SOC operations.\\\\r\\\\nExperience handling malware, ransomware, phishing, and insider threat incidents.\\\\r\\\\nHands-on experience with Microsoft Sentinel and Microsoft D

Key Responsibilities

Job Description (JD) – Cyber Security Analyst (EDR & SOC)\\\\r\\\\n\\\\r\\\\nJob Title: Cyber Security Analyst – EDR & SOC\\\\r\\\\n Location: Lucknow / Hybrid / Remote\\\\r\\\\n Experience: 3-8 Years (customizable)\\\\r\\\\n Department: Information Security / Cyber Defense\\\\r\\\\n\\\\r\\\\nRole Summary\\\\r\\\\n\\\\r\\\\nWe are seeking a skilled Cyber Security Analyst with hands-on experience in Endpoint Detection & Response (EDR) and Security Operations Center (SOC) operations. The candidate will be responsible for monitoring, detecting, investigating, and responding to cyber security incidents across enterprise environments while ensuring continuous improvement of security controls and threat detection capabilities.\\\\r\\\\n\\\\r\\\\nKey Responsibilities\\\\r\\\\nSecurity Operations Center (SOC)\\\\r\\\\nMonitor security alerts and events from SIEM, EDR, IDS/IPS, Firewalls, Email Security, and Cloud Security tools.\\\\r\\\\nPerform triage, investigation, and remediation of security incidents.\\\\r\\\\nConduct threat hunting and proactive monitoring activities.\\\\r\\\\nAnalyze logs and network traffic to identify suspicious activities.\\\\r\\\\nEscalate critical incidents and coordinate response activities with stakeholders.\\\\r\\\\nDevelop and maintain incident response procedures and playbooks.\\\\r\\\\nSupport vulnerability management and security compliance initiatives.\\\\r\\\\nEndpoint Detection & Response (EDR)\\\\r\\\\nManage and monitor EDR platforms such as Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, Carbon Black, or Trellix.\\\\r\\\\nInvestigate endpoint alerts including malware, ransomware, lateral movement, privilege escalation, and persistence mechanisms.\\\\r\\\\nPerform endpoint isolation, containment, remediation, and recovery actions.\\\\r\\\\nCreate and fine-tune EDR detection rules and alerting mechanisms.\\\\r\\\\nConduct forensic investigations on compromised endpoints.\\\\r\\\\nThreat Intelligence & Hunting\\\\r\\\\nUtilize threat intelligence feeds and MITRE ATT&CK; framework for detection improvements.\\\\r\\\\nPerform IOC (Indicators of Compromise) analysis and threat hunting exercises.\\\\r\\\\nIdentify emerging threats and recommend mitigation strategies.\\\\r\\\\nReporting & Documentation\\\\r\\\\nPrepare incident investigation reports and executive summaries.\\\\r\\\\nMaintain SOC metrics, dashboards, and KPI reports.\\\\r\\\\nDocument lessons learned and drive continuous process improvements.\\\\r\\\\nRequired Skills\\\\r\\\\nTechnical Skills\\\\r\\\\nStrong knowledge of:\\\\r\\\\nSIEM Platforms (Microsoft Sentinel, Splunk, QRadar, ArcSight)\\\\r\\\\nEDR Solutions (Microsoft Defender, CrowdStrike, SentinelOne)\\\\r\\\\nWindows, Linux, and Server Security\\\\r\\\\nFirewalls (Palo Alto, Fortinet, Cisco, Check Point)\\\\r\\\\nIDS/IPS and Network Security Monitoring\\\\r\\\\nEmail Security Solutions\\\\r\\\\nActive Directory and Identity Security\\\\r\\\\nCloud Security (Azure, AWS, Microsoft 365)\\\\r\\\\nSecurity Frameworks\\\\r\\\\nMITRE ATT&CK;\\\\nNIST Cybersecurity Framework\\\\r\\\\nISO 27001\\\\r\\\\nCIS Controls\\\\r\\\\nIncident Response Methodologies\\\\r\\\\nAnalytical Skills\\\\r\\\\nLog analysis and correlation\\\\r\\\\nMalware analysis fundamentals\\\\r\\\\nThreat hunting\\\\r\\\\nDigital forensics basics\\\\r\\\\nRisk assessment\\\\r\\\\nQualifications\\\\r\\\\nBachelor\\\\\\\'s degree in Computer Science, Information Security, or related field.\\\\r\\\\nRelevant certifications preferred:\\\\r\\\\nMicrosoft SC-200 (Security Operations Analyst)\\\\r\\\\nCompTIA Security+\\\\r\\\\nCEH\\\\r\\\\nCySA+\\\\r\\\\nGIAC (GCIA/GCIH)\\\\r\\\\nCrowdStrike Certified Falcon Responder\\\\r\\\\nMicrosoft Defender Certifications\\\\r\\\\nPreferred Experience\\\\r\\\\n3+ years in SOC operations.\\\\r\\\\nExperience handling malware, ransomware, phishing, and insider threat incidents.\\\\r\\\\nHands-on experience with Microsoft Sentinel and Microsoft Defender for Endpoint.\\

Skill Requirements

Job Description (JD) – Cyber Security Analyst (EDR & SOC)\\\\r\\\\n\\\\r\\\\nJob Title: Cyber Security Analyst – EDR & SOC\\\\r\\\\n Location: Lucknow / Hybrid / Remote\\\\r\\\\n Experience: 3-8 Years (customizable)\\\\r\\\\n Department: Information Security / Cyber Defense\\\\r\\\\n\\\\r\\\\nRole Summary\\\\r\\\\n\\\\r\\\\nWe are seeking a skilled Cyber Security Analyst with hands-on experience in Endpoint Detection & Response (EDR) and Security Operations Center (SOC) operations. The candidate will be responsible for monitoring, detecting, investigating, and responding to cyber security incidents across enterprise environments while ensuring continuous improvement of security controls and threat detection capabilities.\\\\r\\\\n\\\\r\\\\nKey Responsibilities\\\\r\\\\nSecurity Operations Center (SOC)\\\\r\\\\nMonitor security alerts and events from SIEM, EDR, IDS/IPS, Firewalls, Email Security, and Cloud Security tools.\\\\r\\\\nPerform triage, investigation, and remediation of security incidents.\\\\r\\\\nConduct threat hunting and proactive monitoring activities.\\\\r\\\\nAnalyze logs and network traffic to identify suspicious activities.\\\\r\\\\nEscalate critical incidents and coordinate response activities with stakeholders.\\\\r\\\\nDevelop and maintain incident response procedures and playbooks.\\\\r\\\\nSupport vulnerability management and security compliance initiatives.\\\\r\\\\nEndpoint Detection & Response (EDR)\\\\r\\\\nManage and monitor EDR platforms such as Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, Carbon Black, or Trellix.\\\\r\\\\nInvestigate endpoint alerts including malware, ransomware, lateral movement, privilege escalation, and persistence mechanisms.\\\\r\\\\nPerform endpoint isolation, containment, remediation, and recovery actions.\\\\r\\\\nCreate and fine-tune EDR detection rules and alerting mechanisms.\\\\r\\\\nConduct forensic investigations on compromised endpoints.\\\\r\\\\nThreat Intelligence & Hunting\\\\r\\\\nUtilize threat intelligence feeds and MITRE ATT&CK; framework for detection improvements.\\\\r\\\\nPerform IOC (Indicators of Compromise) analysis and threat hunting exercises.\\\\r\\\\nIdentify emerging threats and recommend mitigation strategies.\\\\r\\\\nReporting & Documentation\\\\r\\\\nPrepare incident investigation reports and executive summaries.\\\\r\\\\nMaintain SOC metrics, dashboards, and KPI reports.\\\\r\\\\nDocument lessons learned and drive continuous process improvements.\\\\r\\\\nRequired Skills\\\\r\\\\nTechnical Skills\\\\r\\\\nStrong knowledge of:\\\\r\\\\nSIEM Platforms (Microsoft Sentinel, Splunk, QRadar, ArcSight)\\\\r\\\\nEDR Solutions (Microsoft Defender, CrowdStrike, SentinelOne)\\\\r\\\\nWindows, Linux, and Server Security\\\\r\\\\nFirewalls (Palo Alto, Fortinet, Cisco, Check Point)\\\\r\\\\nIDS/IPS and Network Security Monitoring\\\\r\\\\nEmail Security Solutions\\\\r\\\\nActive Directory and Identity Security\\\\r\\\\nCloud Security (Azure, AWS, Microsoft 365)\\\\r\\\\nSecurity Frameworks\\\\r\\\\nMITRE ATT&CK;\\\\nNIST Cybersecurity Framework\\\\r\\\\nISO 27001\\\\r\\\\nCIS Controls\\\\r\\\\nIncident Response Methodologies\\\\r\\\\nAnalytical Skills\\\\r\\\\nLog analysis and correlation\\\\r\\\\nMalware analysis fundamentals\\\\r\\\\nThreat hunting\\\\r\\\\nDigital forensics basics\\\\r\\\\nRisk assessment\\\\r\\\\nQualifications\\\\r\\\\nBachelor\\\\\\\'s degree in Computer Science, Information Security, or related field.\\\\r\\\\nRelevant certifications preferred:\\\\r\\\\nMicrosoft SC-200 (Security Operations Analyst)\\\\r\\\\nCompTIA Security+\\\\r\\\\nCEH\\\\r\\\\nCySA+\\\\r\\\\nGIAC (GCIA/GCIH)\\\\r\\\\nCrowdStrike Certified Falcon Responder\\\\r\\\\nMicrosoft Defender Certifications\\\\r\\\\nPreferred Experience\\\\r\\\\n3+ years in SOC operations.\\\\r\\\\nExperience handling malware, ransomware, phishing, and insider threat incidents.\\\\r\\\\nHands-on experience with Microsoft Sentinel and Microsoft Defender for Endpoint.\\

Other Requirements

Job Description (JD) – Cyber Security Analyst (EDR & SOC)\\\\r\\\\n\\\\r\\\\nJob Title: Cyber Security Analyst – EDR & SOC\\\\r\\\\n Location: Lucknow / Hybrid / Remote\\\\r\\\\n Experience: 3-8 Years (customizable)\\\\r\\\\n Department: Information Security / Cyber Defense\\\\r\\\\n\\\\r\\\\nRole Summary\\\\r\\\\n\\\\r\\\\nWe are seeking a skilled Cyber Security Analyst with hands-on experience in Endpoint Detection & Response (EDR) and Security Operations Center (SOC) operations. The candidate will be responsible for monitoring, detecting, investigating, and responding to cyber security incidents across enterprise environments while ensuring continuous improvement of security controls and threat detection capabilities.\\\\r\\\\n\\\\r\\\\nKey Responsibilities\\\\r\\\\nSecurity Operations Center (SOC)\\\\r\\\\nMonitor security alerts and events from SIEM, EDR, IDS/IPS, Firewalls, Email Security, and Cloud Security tools.\\\\r\\\\nPerform triage, investigation, and remediation of security incidents.\\\\r\\\\nConduct threat hunting and proactive monitoring activities.\\\\r\\\\nAnalyze logs and network traffic to identify suspicious activities.\\\\r\\\\nEscalate critical incidents and coordinate response activities with stakeholders.\\\\r\\\\nDevelop and maintain incident response procedures and playbooks.\\\\r\\\\nSupport vulnerability management and security compliance initiatives.\\\\r\\\\nEndpoint Detection & Response (EDR)\\\\r\\\\nManage and monitor EDR platforms such as Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, Carbon Black, or Trellix.\\\\r\\\\nInvestigate endpoint alerts including malware, ransomware, lateral movement, privilege escalation, and persistence mechanisms.\\\\r\\\\nPerform endpoint isolation, containment, remediation, and recovery actions.\\\\r\\\\nCreate and fine-tune EDR detection rules and alerting mechanisms.\\\\r\\\\nConduct forensic investigations on compromised endpoints.\\\\r\\\\nThreat Intelligence & Hunting\\\\r\\\\nUtilize threat intelligence feeds and MITRE ATT&CK; framework for detection improvements.\\\\r\\\\nPerform IOC (Indicators of Compromise) analysis and threat hunting exercises.\\\\r\\\\nIdentify emerging threats and recommend mitigation strategies.\\\\r\\\\nReporting & Documentation\\\\r\\\\nPrepare incident investigation reports and executive summaries.\\\\r\\\\nMaintain SOC metrics, dashboards, and KPI reports.\\\\r\\\\nDocument lessons learned and drive continuous process improvements.\\\\r\\\\nRequired Skills\\\\r\\\\nTechnical Skills\\\\r\\\\nStrong knowledge of:\\\\r\\\\nSIEM Platforms (Microsoft Sentinel, Splunk, QRadar, ArcSight)\\\\r\\\\nEDR Solutions (Microsoft Defender, CrowdStrike, SentinelOne)\\\\r\\\\nWindows, Linux, and Server Security\\\\r\\\\nFirewalls (Palo Alto, Fortinet, Cisco, Check Point)\\\\r\\\\nIDS/IPS and Network Security Monitoring\\\\r\\\\nEmail Security Solutions\\\\r\\\\nActive Directory and Identity Security\\\\r\\\\nCloud Security (Azure, AWS, Microsoft 365)\\\\r\\\\nSecurity Frameworks\\\\r\\\\nMITRE ATT&CK;\\\\nNIST Cybersecurity Framework\\\\r\\\\nISO 27001\\\\r\\\\nCIS Controls\\\\r\\\\nIncident Response Methodologies\\\\r\\\\nAnalytical Skills\\\\r\\\\nLog analysis and correlation\\\\r\\\\nMalware analysis fundamentals\\\\r\\\\nThreat hunting\\\\r\\\\nDigital forensics basics\\\\r\\\\nRisk assessment\\\\r\\\\nQualifications\\\\r\\\\nBachelor\\\\\\\'s degree in Computer Science, Information Security, or related field.\\\\r\\\\nRelevant certifications preferred:\\\\r\\\\nMicrosoft SC-200 (Security Operations Analyst)\\\\r\\\\nCompTIA Security+\\\\r\\\\nCEH\\\\r\\\\nCySA+\\\\r\\\\nGIAC (GCIA/GCIH)\\\\r\\\\nCrowdStrike Certified Falcon Responder\\\\r\\\\nMicrosoft Defender Certifications\\\\r\\\\nPreferred Experience\\\\r\\\\n3+ years in SOC operations.\\\\r\\\\nExperience handling malware, ransomware, phishing, and insider threat incidents.\\\\r\\\\nHands-on experience with Microsoft Sentinel and Microsoft Defender for Endpoint.\\
Apply now
Information at a Glance

Why HCLTech?

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.