The SOC L2 Analyst is responsible for advanced investigation, validation, and response to security incidents escalated from L1 analysts. This role focuses on deep analysis, threat detection, correlation, and containment support while ensuring incidents are handled within defined SLAs. The L2 analyst also plays a key role in tuning detection rules and improving overall SOC efficiency.
Key Responsibilities
- Perform detailed investigation of security alerts escalated by L1 team.
- Validate true positives and eliminate false positives through log analysis and threat intelligence correlation.
- Conduct root cause analysis for security incidents.
- Lead incident response activities including containment, eradication, and recovery support.
- Perform threat hunting using SIEM, EDR, firewall, and cloud logs.
- Fine-tune detection rules and use cases to reduce noise and improve accuracy.
- Document incidents clearly with timeline, impact analysis, and remediation steps.
- Coordinate with clients, infrastructure, cloud, and application teams during major incidents.
- Support compliance reporting and audit requirements.
- Mentor L1 analysts and assist in shift leadership when required.
- Investigate and respond to email security incidents including phishing, malware, and business email compromise (BEC).
- Monitor and analyze cloud security alerts from Microsoft 365, Azure, AWS, and Google Workspace environments.
- Perform vulnerability assessment review and support remediation tracking using vulnerability management platforms.
- Develop and maintain detection use cases aligned with MITRE ATT&CK; techniques.
- Support automation and orchestration initiatives to improve SOC efficiency and incident response times.
- Participate in post-incident reviews and recommend security improvements.
Required Technical Skills
- Hands-on experience with SIEM platforms (Wazuh, Seceon aiSIEM) and Linux OS
- Robust understanding of EDR tools (Microsoft Defender for Endpoint, Cr
📌 SOC Analyst (Gurugram)
🏢 OcIT
📍 Gurugram
Reply to this offer
Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.