Job DescriptionTerralogic is hiring a SOC L3 Lead/SME (Cybersecurity Operations) for our Bangalore office to spearhead advanced threat detection, incident response, and security automation. NnPosition Overview Nn Position: SOC L3 Lead / Subject Matter Expert (SME) N Experience: 7+ years of core cybersecurity operations experience N Location: Bangalore, Karnataka N Core Focus: Hands-on Microsoft Security stack management, root-cause analysis, advanced threat investigation, and remediation orchestration. NnnKey Responsibilities NAdvanced Threat Investigation & RCA Nn Lead deep-dive investigations into complex, multi-stage security incidents escalated by L1/L2 analysts. N Perform comprehensive Root Cause Analysis (RCA) to identify underlying vulnerabilities and system gaps. N Track adversary behavior across the network using cyber threat intelligence frameworks (e.G., MITRE ATT&CK;). NnnMicrosoft Security Stack Execution Nn Architect, configure, and optimize Microsoft Sentinel SIEM/XDR environments. N Develop advanced KQL (Kusto Query Language) queries for custom analytic rules, threat hunting, and watchlists. N Build automated playbooks within Microsoft Sentinel and Azure Logic Apps to optimize SOAR capabilities and reduce Mean Time to Respond (MTTR). NnnRemediation & Transition Planning Nn Design strategic transition plans to migrate legacy SOC operations into modern, automated frameworks. N Formulate containment and remediation strategies during active high-priority incidents.



N Provide actionable blueprints to engineering teams for long-term threat neutralization and system hardening. NnnLeadership & Stakeholder Management Nn Act as the technical SME and point of contact for enterprise customers, handling on-site deployments and crisis communication when required. N Mentor and upscale L1 and L2 security analysts through technical workshops and incident simulations. N Maintain rigorous documentation for incident playbooks, post-mortem reports, and compliance audits. NnnQualifications NTechnical Expertise Nn Expertise: Hands-on mastery of Microsoft Sentinel, Azure Logic Apps, and Microsoft Defender suite. N Query Languages: Exceptional proficiency in writing and tuning KQL queries. N Automation: Proven experience building complex conditional workflows and integrations in Azure DevOps or Logic Apps. N Incident Response: Deep knowledge of network protocols, operating system forensics (Windows/Linux), and cloud security vectors. NnnProfessional Attributes Nn Problem Solving: Exceptional analytical mind capable of connecting disparate security events. N Flexibility: Willingness to work dynamically between the Terralogic corporate office and client sites. N Communication: Transparent verbal and written skills to translate technical cyber risks to non-technical client stakeholders. NnnPreferred Skills but not mandatory Nn Microsoft Certified: Security Operations Analyst Associate (SC-200) N Microsoft Certified: Azure Security Engineer Associate (AZ-500) N GIAC Certified IncidentHandler (GCIH) or Certified Information Systems Security Professional (CISSP) Nn

📌 Cyber Security Specialist (Vasanthanagar)
🏢 TERRALOGIC
📍 Vasanthanagar