SOC Analyst

About the Role

Reward360 Global Services (R360) operates a banking loyalty and rewards platform integrated with major Indian and international banks, including HDFC Bank, ICICI Bank, and Kotak Mahindra Bank. As R360 stands up a dedicated inhouse Security Operations Centre (SOC), the Permanent SOC Analyst will be a frontline defender for production environments serving these regulated banking clients, delivering 24x7 detection, triage, and incident response across our EDR/XDR stack, while maintaining strict compliance with PCI DSS v4.

0.1, the RBI Cyber Security Framework, and the DPDP Act 2023.

Key Responsibilities

1. 24x7 Detection & Monitoring

• Monitor Crowd. Strike Falcon, Sentinel. One , PIM,PAM, and DAM Singularity consoles for endpoint, cloud workload, and identity-based threat detections across production and UAT estates.
• Maintain client-segmented visibility and SLA adherence for HDFC, ICICI, and Kotak-linked environments in line with each bank's Info. Sec SLA and contractual security addenda.

1. Triage, Investigation & Escalation

• Perform L1/L2 alert triage and investigation, mapping detections to MITRE ATT&CK tactics/techniques.
• Tune detection rules (custom IOAs in Crowd. Strike, Deep Visibility / STAR rules in Sentinel. One) to reduce false positives without eroding coverage.
• Escalate confirmed incidents per the SOC escalation matrix, with clear severity classification and business-impact framing.

1. Incident Response

• Execute containment, eradication, and recovery actions using EDR host-isolation and remediation capability.
• Preserve chain-of-custody and forensic integrity for evidence supporting internal investigations and, where required, regulator/bank-facing reporting. Support incident timelines aligned to RBI's cyber-incident reporting mandate and CERT-In reporting obligations.

1. Threat Hunting & Detection Engineering

• Run hypothesis-driven threat hunts across endpoint telemetry, prioritizing BFSI-targeted TTPs (banking trojans, ATM/POS malware families, phishing-to-RAT chains, credential-harvesting campaigns).
• Correlate EDR telemetry with SIEM, AWS WAF, Cloud. Trail, and application logs to reconstruct crossenvironment attack chains.

1. Compliance, Audit & Change Support

• Provide Info. Sec sign-off inputs for change requests (PCCB) impacting SOC-monitored assets, where applicable.
• Support PCI DSS QSA assessments, ISO 27001 audits, and bank-specific annual vendor security reviews with SOC tooling evidence (alert logs, detection coverage reports, response-time metrics).

1. Documentation & Mentorship

• Maintain shift handover notes, SOC playbooks, and runbooks; contribute to continuous improvement of detection use cases.
• Mentor SOC interns on triage methodology, tool usage, and escalation discipline. Required Qualifications
• Bachelor's degree in computer science, IT, or a related field (or equivalent practical experience).
• 2–3 years of hands-on SOC / blue-team experience, ideally within BFSI, fintech, or another regulated environment.
• Working expertise with at least one EDR/XDR/ platform, incident responder; Crowd. Strike Falcon and/or Sentinel. One Singularity strongly preferred.
• Solid grounding in the MITRE ATT&CK framework, cyber kill chain analysis, and common BFSI threat-actor TTPs.
• Familiarity with SIEM platforms (Splunk / QRadar / Microsoft Sentinel / ELK) for cross-source log correlation.
• Working knowledge of PCI DSS v4.0.1 (particularly Requirements 10, 11, and 12), the RBI Cyber Security Framework, and DPDP Act 2023 fundamentals.
• Comfort with Windows and Linux internals, core network protocols (TCP/IP, DNS, HTTP/S), and common attack vectors.
• Scripting/automation ability (Python or Power. Shell) for detection engineering or SOAR playbook development is a strong plus.
• Familiarity with building internal SOC tools and Agentic automation Preferred Certifications
• CompTIA Security+ / CySA+
• Crowd. Strike Certified Falcon Administrator (CCFA) or Responder (CCFR)
• CEH (Certified Ethical Hacker)
• CSA
• OSDA Soft Skills
• Willingness and ability to work rotational shifts, including nights and weekends, as part of 24x7 SOC coverage.
• Strong written communication for incident reports, shift handovers, and periodic client-facing summaries.
• Composure under pressure, able to prioritise correctly during multi-alert or major-incident scenarios.