SOC Analyst L2

Experience Required: 6-8

Role Descriptions

Security Monitoring & Incident Response

Investigate and analyze security alerts escalated by L1 SOC analysts.

Perform triage, containment, eradication, and recovery activities for security incidents.

1. Perform in-depth analysis of security alerts escalated from L1
2. Investigate suspicious activities using SIEM, EDR, and threat intelligence tools
3. Correlate events across multiple log sources (firewalls, endpoints, IAM, cloud logs)
4. Validate true positives and recommend reducing false positives
5. Lead triage and response for medium to high severity incidents
6. Coordinate with IT, network, and application teams during incidents and support deep investigations when required
7. Conduct proactive threat hunting based on TTPs (e.g., MITRE ATT&CK;)
8. Fine-tuning and optimize SIEM use cases to reduce false positives
9. Develop recent correlation rules and detection logic
10. Document incidents, findings, and response actions
11. Prepare weekly , monthly reports for SOC leadership and stakeholders

Location: Siruseri-Chennai

📌 Soc Analyst (Chennai)
🏢 Cerebra
📍 Chennai