Senior SOC Analyst / Detection Engineer (L2)

Company: Cywarden Global Services Location: Mohali, India (On-site) Department: Security Operations Center (SOC) Experience Level: L2 / Senior Analyst

About the Role

Cywarden Global Services is looking for a Senior SOC Analyst / Detection Engineer (L2) to join our Security Operations Center in Mohali. This role is ideal for an experienced security analyst who thrives on hands-on incident investigation, detection engineering, and proactive threat hunting across modern cloud and hybrid environments. You will act as a technical escalation point for the SOC, own incidents end-to-end, and continuously strengthen our detection capabilities.

Key Responsibilities

- Investigate and own security incidents from initial triage through containment and resolution.
- Perform advanced investigations using Microsoft Sentinel, Microsoft Defender XDR, Entra ID, Microsoft 365, Azure, OCI, Palo Alto, and other integrated security platforms.
- Develop, test, and tune Microsoft Sentinel analytics rules, KQL queries, and custom detections to improve detection accuracy and reduce false positives.
- Perform proactive threat hunting across endpoint, identity, cloud, email, and network environments.
- Correlate events from multiple log sources to identify attack patterns, lateral movement, privilege escalation, persistence, and data exfiltration.
- Analyze attacker techniques using the MITRE ATT&CK; framework and improve detection coverage.
- Develop and maintain investigation playbooks, detection use cases, and SOC runbooks.
- Perform root cause analysis and provide technical recommendations to prevent recurrence of security incidents.
- Validate existing detections against emerging threats and recommend improvements.
- Support onboarding of recent log sources and ensure complete security visibility across the environment.
- Collaborate with infrastructure, cloud, networking, and identity teams during investigations and remediation activities.




- Mentor L1 SOC analysts and review investigation quality.
- Prepare detailed technical incident reports and communicate findings to customers and internal stakeholders.

Required Skills & Experience

- 3–5+ years of hands-on experience in a SOC environment, with demonstrated progression to L2/senior analyst responsibilities.
- Strong working knowledge of Microsoft Sentinel (analytics rules, workbooks, incident management) and KQL query writing/tuning.
- Practical experience with Microsoft Defender XDR, Entra ID, Microsoft 365, and Azure security tooling.
- Exposure to OCI (Oracle Cloud Infrastructure) and Palo Alto firewall/security products.
- Solid understanding of the MITRE ATT&CK; framework and its application to detection engineering and threat hunting.
- Experience correlating multi-source log data (endpoint, identity, cloud, email, network) to identify complex attack chains.
- Proven ability to write and maintain SOC runbooks, playbooks, and detection use-case documentation.
- Strong root cause analysis and technical report-writing skills, with the ability to communicate findings to both technical and customer-facing audiences.
- Experience mentoring or reviewing the work of junior (L1) analysts.

Nice to Have

- Relevant certifications such as SC-200, AZ-500, CompTIA CySA+, GCIH, or equivalent.
- Scripting experience (PowerShell, Python) for automation of detections or response workflows.
- Prior experience in an MSSP or managed detection & response (MDR) workplace.

What We Offer

- Opportunity to work with a modern, multi-cloud security stack (Microsoft, OCI, Palo Alto) in a fast-paced SOC.
- A collaborative environment with clear growth paths from L2 toward detection engineering, threat hunting, or SOC leadership tracks.
- Exposure to end-to-end incident lifecycle management for enterprise customers.

To Apply: Interested candidates can send their updated resume with relevant experience details.

Cywarden Global Services | Mohali

Pay: ₹600,000.00 - ₹900,000.00 per year

Benefits:

- Commuter assistance
- Health insurance
- Paid time off

Work Location: In person

📌 SOC (India)
🏢 Cywarden Global Services
📍 India