This permanent SOC Analyst role is a frontline defender for production environments, delivering 24x7 detection, triage, and incident response across the EDR/XDR stack. The position maintains strict compliance with PCI DSS v4.0.1, the RBI Cyber Security Framework, and the DPDP Act 2023, serving regulated banking clients. The analyst will work within Reward360 Global Services (R360), which operates a banking loyalty and rewards platform integrated with major Indian and international banks.
Responsibilities
Monitor CrowdStrike Falcon, SentinelOne, PIM, PAM, and DAM Singularity consoles for endpoint, cloud workload, and identity-based threat detections across production and UAT estates
Maintain client-segmented visibility and SLA adherence for HDFC, ICICI, and Kotak-linked environments in line with each bank's InfoSec SLA and contractual security addenda
Perform L1/L2 alert triage and investigation, mapping detections to MITRE ATT&CK tactics/techniques
Tune detection rules (custom IOAs in CrowdStrike, Deep Visibility / STAR rules in SentinelOne) to reduce false positives without eroding coverage
Escalate confirmed incidents per the SOC escalation matrix, with clear severity classification and business-impact framing
Execute containment, eradication, and recovery actions using EDR host-isolation and remediation capability
Preserve chain-of-custody and forensic integrity for evidence supporting internal investigations and, where required, regulator/bank-facing reporting
Support incident timelines aligned to RBI's cyber-incident reporting mandate and CERT-In reporting obligations
Run hypothesis-driven threat hunts across endpoint telemetry, prioritizing BFSI-targeted TTPs (banking trojans, ATM/POS malware families, phishing-to-RAT chains, credential-harvesting campaigns)
Correlate EDR telemetry with SIEM, AWS WAF, CloudTrail, and application logs to reconstruct cross-environment attack chains
Provide InfoSec sign-off inputs for change requests (PCCB) impacting SOC-monitored assets, where applicable
Support PCI DSS QSA assessments, ISO 27001 audits, and bank-specific annual vendor security reviews with SOC tooling evidence (alert logs, detection coverage reports, response-time metrics)
Maintain shift handover notes, SOC playbooks, and runbooks
Contribute to continuous improvement of detection use cases
Mentor SOC interns on triage methodology, tool usage, and escalation discipline
Requirements
Bachelor's degree in computer science, IT, or a related field (or equivalent practical experience)
2–3 years of hands-on SOC / blue-team experience, ideally within BFSI, fintech, or another regulated environment
Working expertise with at least one EDR/XDR platform, incident responder; CrowdStrike Falcon and/or SentinelOne Singularity strongly preferred
Millions of jobs, with real people getting hired every day
200,000+
New jobs added daily
7,000,000+
Verified job listings
1,000,000+
Tailored applications submitted
Solid grounding in the MITRE ATT&CK framework, cyber kill chain analysis, and common BFSI threat-actor TTPs
Familiarity with SIEM platforms (Splunk / QRadar / Microsoft Sentinel / ELK) for cross-source log correlation
Working knowledge of PCI DSS v4.0.1 (particularly Requirements 10, 11, and 12), the RBI Cyber Security Framework, and DPDP Act 2023 fundamentals
Comfort with Windows and Linux internals, core network protocols (TCP/IP, DNS, HTTP/S), and common attack vectors
Familiarity with building internal SOC tools and Agentic automation
Willingness and ability to work rotational shifts, including nights and weekends, as part of 24x7 SOC coverage
Strong written communication for incident reports, shift handovers, and periodic client-facing summaries
Composure under pressure, able to prioritize correctly during multi-alert or major-incident scenarios
Nice to have:
Scripting/automation ability (Python or PowerShell) for detection engineering or SOAR playbook development
Preferred Certifications
CompTIA Security+ / CySA+
CrowdStrike Certified Falcon Administrator (CCFA) or Responder (CCFR)
CEH (Certified Ethical Hacker)
CSA OSDA
About the Company
Reward360 Global Services (R360) operates a banking loyalty and rewards platform integrated with major Indian and international banks, including HDFC Bank, ICICI Bank, and Kotak Mahindra Bank. As R360 stands up a dedicated in-house Security Operations Centre (SOC), it will serve these regulated banking clients.