Job Description SOC Analyst – Level 2

We are seeking a proactive Senior SOC Analyst (L2) to support 24x7 Security Operations Center (SOC) functions. The role focuses on advanced security monitoring, incident triage, analysis, and response coordination across enterprise environments, with additional support for Windows (Wintel) and network security operations.

Key Responsibilities:

- Perform detailed investigation of security alerts escalated by L1 team.
- Validate true positives and eliminate false positives through log analysis and threat intelligence correlation.
- Conduct root cause analysis for security incidents.
- Lead incident response activities including containment, eradication, and recovery support.
- Perform threat hunting using SIEM, EDR, firewall, and cloud logs.
- Fine-tune detection rules and use cases to reduce noise and improve accuracy.
- Document incidents clearly with timeline, impact analysis, and remediation steps.
- Coordinate with clients, infrastructure, cloud, and application teams during major incidents.
- Support compliance reporting and audit requirements. Mentor L1 analysts and assist in shift leadership when required.
- Investigate and respond to email security incidents including phishing, malware, and business email compromise (BEC).
- Monitor and analyze cloud security alerts from Microsoft 365, Azure, AWS, and Google Workspace environments.
- Perform vulnerability assessment review and support remediation tracking using vulnerability management platforms.
- Develop and maintain detection use cases aligned with MITRE ATT&CK; techniques.
- Support automation and orchestration initiatives to improve SOC efficiency and incident response times.
- Participate in post-incident reviews and recommend security improvements.

Required Technical Skills :

- Hands-on experience with SIEM platforms (Wazuh,



Seceon aiSIEM) and Linux OS
- Strong understanding of EDR tools (Microsoft Defender for Endpoint, CrowdStrike Falcon).
- Knowledge of firewalls, IDS/IPS, VPN, and proxy logs.
- Experience analyzing Windows, Linux, and cloud logs.
- Understanding of MITRE ATT&CK; framework.
- Basic scripting knowledge (PowerShell, Python, or Bash preferred).
- Familiarity with ticketing tools such as ServiceNow or ConnectWise.
- Knowledge of email security solutions such as Microsoft Defender for Office 365, Mimecast, or Proofpoint.
- Familiarity with vulnerability management tools such as ConnectSecure, Nessus, Qualys, or OpenVAS.
- Understanding of cloud security monitoring and logging (Azure AD, Microsoft 365, AWS CloudTrail, GCP Audit Logs).
- Experience with threat intelligence platforms and IOC analysis.
- Ability to create and optimize SIEM correlation rules and detection use cases.
- Working knowledge of KQL, SPL, or equivalent query languages.
- Basic malware analysis and forensic investigation skills.

Qualifications :

- 5–8 years of experience in SOC or security operations.
- Bachelor’s degree in computer science, Information , or related field.
- Certifications preferred: CEH, Security+, CySA+, or equivalent.

Key Competencies :

- Strong analytical and troubleshooting skills.
- Ability to work in a 24x7 shift model.
- Clear documentation and communication skills.
- Ability to stay calm during high-severity incidents.
- Continuous learning mindset.
- Solid incident management and decision-making skills.
- Proactive threat hunting mindset.
- Strong stakeholder and client communication skills.
- Ability to mentor junior analysts and drive process improvements.

Pay: ₹950,000.00 - ₹1,400,000.00 per year

Benefits:

- Health insurance
- Life insurance
- Paid sick time
- Paid time off
- Provident Fund

Work Location: In person

📌 SOC Analyst (India)
🏢 FUTUREIST PEOPLEIQ
📍 India