We are seeking a motivated Level 2 SOC Analyst to join our Security Operations Center. The SOC Analyst L2 is responsible for advanced monitoring, investigation, and response to security incidents escalated from L1. This role involves deeper threat analysis, root cause identification, incident containment, and coordination with internal teams to mitigate risks. The L2 analyst also supports threat hunting, tuning security tools, and improving SOC processes.

Key Responsibilities

-  Investigate and respond to security incidents escalated from SOC L1, including malware, phishing, endpoint threats, network intrusions, and policy violations
-  Perform in-depth log analysis using SIEM, EDR, firewall, IDS/IPS, and other security tools
-  Conduct incident triage, containment, eradication, and recovery activities  Identify root cause and impact analysis for confirmed incidents
-  Support threat hunting activities to proactively identify hidden threats  Create and update incident reports, playbooks, and SOPs
-  Fine-tune SIEM correlation rules and reduce false positives
-  Coordinate with IT, network, endpoint, and application teams during incident response
-  Assist in digital forensics and malware analysis (basic to intermediate level)




-  Mentor and guide SOC L1 analysts during investigations
-  Participate in on-call or shift-based operations, if required

Technical Skills & Knowledge

-  Strong hands-on experience with SIEM platforms (Innspark, Splunk, QRadar, Sentinel, Elastic, etc.)
-  Experience with EDR/XDR tools (SentinelOne, CrowdStrike, Defender, etc.)
-  Knowledge of network security concepts: TCP/IP, DNS, HTTP/S, VPN, firewalls
-  Familiarity with MITRE ATT&CK; framework and attack kill chains
-  Experience analyzing Windows & Linux logs, Active Directory, and cloud logs (AWS/Azure)
-  Understanding of phishing analysis, malware behavior, and IOC analysis
-  Basic scripting knowledge (PowerShell / Python) is an advantage

Experience & Qualifications

-  2-4 years of experience in SOC / Cyber Security Operations
-  Master's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Equivalent professional experience will also be considered.
-  Security certifications preferred: o CEH o CompTIA Security+ o CSA

Pay: ₹35,000.00 - ₹45,000.00 per month

Advantages:

- Flexible schedule
- Paid sick time
- Paid time off
- Provident Fund

Work Location: In person

📌 SOC ANALYST (Thiruvananthapuram)
🏢 Crossgen Technologies Private
📍 Thiruvananthapuram