Company Overview

Incedo is a US-based consulting, data science and technology services firm with over 3000 people helping clients from our six offices across US, Mexico and India. We help our clients achieve competitive advantage through end-to-end digital transformation. Our uniqueness lies in bringing together strong engineering, data science, and design capabilities coupled with deep domain understanding. We combine services and products to maximize business impact for our clients in telecom, Banking, Wealth Management, product engineering and life science

& healthcare industries.

Working at Incedo will provide you an opportunity to work with industry leading client organizations, deep technology and domain experts, and global teams.

Incedo

University, our learning platform, provides ample learning opportunities starting with a structured onboarding program and carrying throughout various stages of your career. A variety of fun activities is also an integral part of our friendly work environment. Our flexible career paths allow you to grow into a program manager, a technical architect or a domain expert based on your skills and interests.

Our Mission is to enable our clients to maximize business impact from technology by

- Harnessing the transformational impact of emerging technologies
- Bridging the gap between business and technology

Role Description

Incedo is seeking a SOC Analyst to join our rapidly growing cybersecurity team! The SOC – Level 2 Analyst is a mid-level cybersecurity professional responsible for investigating, analyzing, and responding to security incidents escalated by the SOC Level 1 team. The role focuses on validating security alerts, conducting detailed investigations, identifying the scope and impact of security incidents, and coordinating with resolver groups for timely remediation. The L2 Analyst works closely with SOC L1, Security Engineers, Incident Response teams, and IT stakeholders to strengthen the organization's security posture and ensure effective incident handling.

Incident Investigation & Response

Investigate and analyze security incidents escalated by the SOC L1 team.

Perform detailed log analysis, endpoint review, and event correlation to determine the nature and impact of security incidents.

Validate true positive alerts and eliminate false positives.

Support incident containment, eradication, and recovery activities by coordinating with relevant resolver groups.

Document investigation findings and recommend corrective actions.

Threat Detection & Analysis





Analyze and triage alerts generated by SIEM, EDR/XDR, Email Security, Cloud Security, and Network Security tools.

Correlate security events from multiple log sources to identify Indicators of Compromise (IOCs).

Investigate phishing, malware, unauthorized access, privilege escalation, data exfiltration, and suspicious user activities.

Utilize Threat Intelligence feeds to enrich investigations.

Monitor security alerts generated from SIEM, EDR, Cloud Security, IAM, Firewall, IDS/IPS, Proxy, WAF, VPN, and Endpoint Security solutions.

Perform detailed analysis of Windows, Linux, Network, and Cloud logs.

Identify abnormal user behavior and suspicious system activities.

Documentation & Reporting

Maintain detailed documentation of investigations, actions taken, and incident timelines.

Update incident tickets with technical findings and investigation notes.

Assist in preparing Root Cause Analysis (RCA) reports where required.

Contribute to maintaining SOC runbooks and standard operating procedures.

Collaboration & Knowledge Sharing

Work closely with SOC L1 analysts to improve investigation quality.

Coordinate with L3 Engineers and resolver teams during major security incidents.

Participate in knowledge-sharing sessions and technical discussions.

Assist in improving investigation procedures and operational processes.

Stakeholder Communication

Technical Skills

Incedo is seeking a SOC Analyst to join our rapidly growing cybersecurity team! The SOC – Level 2 Analyst is a mid-level cybersecurity professional responsible for investigating, analyzing, and responding to security incidents escalated by the SOC Level 1 team. The role focuses on validating security alerts, conducting detailed investigations, identifying the scope and impact of security incidents, and coordinating with resolver groups for timely remediation. The L2 Analyst works closely with SOC L1, Security Engineers, Incident Response teams, and IT stakeholders to strengthen the organization's security posture and ensure effective incident handling.

Incident Investigation & Response

Investigate and analyze security incidents escalated by the SOC L1 team.

Perform detailed log analysis,



endpoint review, and event correlation to determine the nature and impact of security incidents.

Validate true positive alerts and eliminate false positives.

Support incident containment, eradication, and recovery activities by coordinating with relevant resolver groups.

Document investigation findings and recommend corrective actions.

Threat Detection & Analysis

Analyze and triage alerts generated by SIEM, EDR/XDR, Email Security, Cloud Security, and Network Security tools.

Correlate security events from multiple log sources to identify Indicators of Compromise (IOCs).

Investigate phishing, malware, unauthorized access, privilege escalation, data exfiltration, and suspicious user activities.

Utilize Threat Intelligence feeds to enrich investigations.

Monitor security alerts generated from SIEM, EDR, Cloud Security, IAM, Firewall, IDS/IPS, Proxy, WAF, VPN, and Endpoint Security solutions.

Perform detailed analysis of Windows, Linux, Network, and Cloud logs.

Identify abnormal user behavior and suspicious system activities.

Documentation & Reporting

Maintain detailed documentation of investigations, actions taken, and incident timelines.

Update incident tickets with technical findings and investigation notes.

Assist in preparing Root Cause Analysis (RCA) reports where required.

Contribute to maintaining SOC runbooks and standard operating procedures.

Collaboration & Knowledge Sharing

Work closely with SOC L1 analysts to improve investigation quality.

Coordinate with L3 Engineers and resolver teams during major security incidents.

Participate in knowledge-sharing sessions and technical discussions.

Assist in improving investigation procedures and operational processes.

Stakeholder Communication

Nice-to-have skills

Qualifications

Bachelor’s degree in computer science, Information Technology, Cyber Security, or a related field.

4–7 years of relevant SOC / Cyber Security experience.

Strong analytical, troubleshooting, and problem-solving skills.

Excellent written and verbal communication skills.

Ability to work independently and collaboratively in a team workplace.

Strong documentation and incident reporting skills.

Willingness to work in a 24x7 rotational shift environment, including weekends and holidays as required.

Company Value

We value diversity at Incedo. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

📌 Senior-Software Engineer (Gurugram)
🏢 Incedo
📍 Gurugram