InfoSec L1 SOC Analyst

About the role

At ZICC, you'll be part of a dynamic team that partners with colleagues worldwide, embodying the true spirit of One Zoetis. Together, we ensure seamless integration and collaboration, fostering an environment where your contributions can make a real impact. Be a part of our journey to pioneer innovation and drive the future of animal healthcare.

What you'll do

• Partner with onshore SOC and incident response teams to triage, escalate and assist in the investigation of endpoint-related alerts using CrowdStrike EDR and SIEM
• Analyze and interpret SIEM detections and endpoint telemetry to understand alert context, assess severity and support appropriate response actions
• Contribute feedback on alert fidelity by documenting false positives, missed detections and behavioral anomalies encountered during investigations
• Support efforts to improve endpoint visibility by assisting with sensor health checks, basic policy verification and telemetry validation activities
• Participate in investigations of suspicious activity by gathering relevant data from EDR, SIEM and threat intelligence sources to aid in root cause analysis

What you need

• 2–5 yrs of experience
• Vulnerability assessment
• SIEM
• Incident response
• Network security
• EDR
• IAM
• B.Tech or B.E. or B.Sc or BCA

Good to have

• Cloud security
• CISSP
• Python
• Firewalls
• Azure
• AWS