Company Profile:
Founded in 1976, CGI is among the largest independent IT and business consulting services firms in the world. With 94,000 consultants and professionals across the globe, CGI delivers an end-to-end portfolio of capabilities, from strategic IT and business consulting to systems integration, managed IT and business process services and intellectual property solutions. CGI works with clients through a local relationship model complemented by a global delivery network that helps clients digitally transform their organizations and accelerate results. CGI Fiscal 2024 reported revenue is CA$14.68 billion and CGI shares are listed on the TSX (GIB.A) and the NYSE (GIB). Learn more at cgi.com.

Job Title: L2 SOC Analyst
Position: SSE/LA
Experience: 4 to 7 years
Category: Software Development/ Engineering
Shift: 24/7 Rotational Shift
Main location: Bangalore
Position ID: J0826-0242
Employment Type: Full Time
Education Qualification: Bachelor's degree in Computer Science or related field or higher with minimum 4 years of relevant experience.

The L2 SOC Analyst is responsible for advanced security monitoring, investigation, and incident response across enterprise environments. This role focuses on deep analysis of alerts, threat validation, escalation handling, and coordination with L3 teams, using tools such as Microsoft Defender, Microsoft Sentinel, Cofense, Proofpoint, and Splunk.

Key Responsibilities
Perform in depth analysis and triage of security alerts escalated from L1 analysts.
Investigate security incidents across endpoints, email, network, and cloud environments.
Use Microsoft Defender (Defender for Endpoint, Defender for Office 365, Defender for Cloud) to analyze endpoint and identity based threats.
Monitor, investigate,



and respond to incidents using Microsoft Sentinel, including querying using KQL and tuning detection rules.
Analyze phishing and email based threats using Cofense and Proofpoint, including malware, spoofing, and BEC incidents.
Perform log analysis and correlation using Splunk to identify anomalous behavior and advanced threats.
Validate true positives, identify root cause, and recommend remediation actions.
Handle incident escalation to L3 teams and coordinate with IT, IR, and infrastructure teams.
Support containment, eradication, and recovery activities during security incidents.
Create and update incident reports, playbooks, and SOPs.
Assist in use case tuning, false positive reduction, and dashboard improvements.
Participate in threat hunting activities and continuous improvement initiatives.

Required Skills & Experience
3–6 years of experience in SOC operations or cybersecurity monitoring roles.
Strong hands on experience with Microsoft Defender and Microsoft Sentinel.
Practical experience with Splunk for log analysis and investigations.
Experience handling phishing investigations using Cofense and Proofpoint.
Solid understanding of:
MITRE ATT&CK; framework
Incident response lifecycle
Malware, ransomware, phishing, and credential based attacks
Experience with KQL (Sentinel) and SPL (Splunk) is preferred.
Strong analytical and documentation skills.

Preferred Certifications




Microsoft SC 200 (Security Operations Analyst)
Splunk Core Certified Power User / Enterprise Security
GIAC (GCIA, GCIH) or equivalent
CEH / CySA+ (optional)

Shift & Other Requirements
Willingness to work in 24×7 shifts (if required).
Robust communication skills for stakeholder and client interactions.

Your future duties and responsibilities

Required qualifications to be successful in this role

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

Come join our team—one of the largest IT and business consulting services firms in the world.

📌 soc analsyt (India)
🏢 CGI
📍 India