Job Location: Pune, Noida, Chennai, Bangalore Location Flexibility: Multiple Locations in Country Req Id: 10658 Posting Start Date: 8/3/26 At Fujitsu, our purpose is to make the world more sustainable by building trust in society through innovation. Founded in Japan in 1935, Fujitsu has been a pioneer in technology and innovation for decades. Today, as a world-leading digital transformation partner, we are committed to transforming business and society in the digital age.

With approximately 130,000 employees across over 50 countries, Fujitsu offers a broad range of products, services, and solutions. We collaborate with our customers to co-create solutions that drive enterprise-wide digitalization while actively working to address social issues and contribute to the United Nations Sustainable Development Goals (SDGs).

Role: SOC Analyst Responsible for real-time monitoring, triage, investigation, and escalation of security incidents in a 24×7 SOC setting.

Key Responsibilities Perform continuous monitoring and alert triage from SIEM, EDR, and security tools

Classify alerts into true positive / false positive / benign with documented evidence

Conduct log-based investigations across endpoints, network, identity, and cloud sources

Map observed activity to MITRE ATT&CK; techniques and identify potential attack paths

Escalate incidents with full context (timeline, impacted assets, severity, recommended actions)

Maintain incident records in ticketing systems (ServiceNow/Jira) with proper documentation

Follow defined SOPs, playbooks, and SLAs for response and escalation

Participate in shift handovers with clear incident status and risks





Support use-case tuning and false positive reduction

(L2) Perform deep-dive investigations, threat hunting, and root cause analysis Core Skills Detection & Investigation Strong understanding of alert triage lifecycle

Ability to analyze

Endpoint telemetry (process, registry, command-line)

Network logs (DNS, proxy, firewall)

Authentication logs (AD, Azure AD, IAM)

Tools (Hands-on, not exposure) SIEM: Microsoft Sentinel / Splunk / QRadar / XSIAM

EDR/XDR: CrowdStrike / Defender / SentinelOne

Ticketing: ServiceNow / Jira Expectation: Ability to query, investigate, and correlate — not just navigate UI Technical Fundamentals Networking: TCP/IP, DNS, HTTP/S, VPN behavior

OS: Windows Event Logs, Linux logs

Identity: Authentication flows (Kerberos, NTLM, SSO basics) Certifications Preferred (not Mandatory) Microsoft SC-200 (for Sentinel environments)

CompTIA Security+ / CySA+

Vendor-specific (CrowdStrike / Palo Alto / SentinelOne) — only if hands-on Experience Expectations 2-5 years SOC / monitoring experience

Can independently triage alerts and follow playbook.

Can perform independent investigation, correlation, and incident validation

Able to guide analysts and improve detection quality Relocation Supported: Yes Visa Sponsorship Approved: No At Fujitsu, we are committed to an inclusive recruitment process that values the diverse backgrounds and experiences of all applicants. We believe that hiring people from a wide variety of backgrounds makes us stronger, not because it's the right thing to do, but because it allows us to draw on a wider range of perspectives and life experiences.

📌 Security Assistant (Karnataka)
🏢 Fujitsu
📍 Karnataka