Company description Publicis Re:Sources is at the core of Publicis Groupe, the worlds largest communications company. We are the only full-service, end-to-end shared service organization in the industry, enabling Groupe agencies to do what they do best: innovate and transform for their clients. Formed in 1998 as a small team to service a few Publicis Groupe firms, Publicis Re:Sources has grown to 6,000+ employees in over 55 countries.

We provide technology solutions and business services, including finance, accounting, legal, perks, procurement, tax, real estate, treasury and risk management, information security, and global mobility supporting 110,000+ employees across the Publicis Groupe network. Our people are at the center of everything we do, bringing curiosity, collaboration, and a commitment to excellence to their work every day. Learn more about Publicis Re:Sources and the Publicis Groupe agencies we support at publicisresources.com Overview Role Summary: The role will primarily focus on Endpoint Detection and Response (EDR) alert analysis, proactive threat hunting, malware analysis, reverse malware analysis, sandbox analysis, and incident response.

The ideal candidate should possess strong analytical and investigative capabilities to identify, analyze, contain, and respond to advanced cyber threats. The candidate should have an advanced understanding of endpoint telemetry, malware behavior, attacker techniques, and enterprise security operations. In addition to the core responsibilities, the candidate should have good working knowledge of SIEM, Microsoft 365 security alerts, phishing investigations, threat intelligence, CASB, DLP, SOAR, AIdriven security operations, and SOC automation.

Key Responsibilies: Perform advanced investigation and analysis of security alerts generated from Endpoint Detection and Response (EDR) platforms, including ransomware, malware, credential compromise, insider threats,



Advanced Persistent Threats (APT), and other sophisticated attacks. Conduct proactive threat hunting across endpoints, identities, cloud, and enterprise environments using endpoint telemetry, threat intelligence, behavioral analytics, and the MITRE ATT&CK; framework. Perform static and dynamic malware analysis, reverse engineer malicious files, analyze sandbox results, and extract Indicators of Compromise (IOCs), Indicators of Attack (IOAs)and attacker Tactics, Techniques, and Procedures (TTPs).

Lead incident investigations by validating threats, determining attack scope and impact, recommending containment and remediation actions, and supporting Incident Response activities. Develop and optimize threat detection use cases, hunting queries, detection rules, and correlation logic to continuously enhance the organization s detection capabilities. Monitor, investigate, and correlate security alerts from SIEM, Microsoft 365 Security, Email Security, CASB, DLP, and other enterprise security platforms to identify and respond to security incidents.

Investigate phishing campaigns, Business Email Compromise (BEC), cloud security incidents, identity-based attacks, and data protection events across enterprise environments. Leverage threat intelligence to identify emerging threats, improve detection coverage, and recommend proactive security enhancements. Develop AI-driven detection and investigation use cases, automate repetitive SOC activities using Python, PowerShell, SOAR, Copilot, GenAI, and other automation technologies,



and contribute to continuous SOC process optimization.

Prepare technical investigation reports, develop SOPs and playbooks, mentor junior SOC analysts, and contribute to the continuous maturity of SOC operations.

Qualifications Skillset &

• Qualifica ons: Advanced hand-on Experience with EDR Platform such as CrowdStrike, SIEM Monitoring &

- Investigation, M365 Security Alert Investigation, Incident Analysis &
- Response, Threat Hunting, Threat Intel. Familiarity with AI, GenAI, Copilot, machine learning, or AI-assisted technologies for alert triage, investigation, threat hunting, detection engineering, and SOC automation.

Experience with scripting (Python, PowerShell) for automation, Phishing analysis, CASB &

- DLP alerts investigation and threat analysis is an advantage. 5+ Years of Security domain experience with minimum of 4+ years of SOC analyst.

Personal Attributes

Strong and innovative approach to problem solving and finding solutions. Excellent communicator (written and verbal, formal and informal). Flexible and proactive/self-motivated working style with strong personal ownership of problem resolution. Ability to multi task under pressure and work independently with minimal supervision. Ability to priori ze when under pressure. Able to work with remote employees & teams to create highly effective documenta on Educa on Full Time Bachelor s / Master s degree Full Time Bachelor s / Master s degree Preferred Certifications CEH | CompTIA Security + | CHFI | CCFR | CCFA | CCFH Other relevant EDR, malware analysis, incident response, threat hunting, SIEM, or cloud security certifications

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Associate SOC (Gurugram)
🏢 Publicis Resources
📍 Gurugram