Overview

SOC Analyst in Cybersecurity Team (Analyst 2)

About Catalyst Brands

Catalyst Brands is a leading U.S. retail company formed through the merger of JCPenney and SPARC Group. We bring together iconic names such as Aéropostale, Brooks Brothers, Lucky Brand, Nautica, and JCPenney under one powerful platform. With nearly 1,800 stores, a strong e-commerce presence, and a customer base of over 60 million, we are redefining up-to-date retail through scale, innovation, and heritage. Backed by industry leaders,

Catalyst Brands offers a dynamic environment where talent can thrive and help shape the future of fashion and retail.

Role Overview A SOC (Security Operations Center) L2 Analyst, also known as Tier 2 or Analyst 2, is the intermediate tier in the common three-tier SOC model for Catalyst Brands Cybersecurity Team. Their primary goal is to handle escalated alerts and confirmed or complex incidents that Tier 1 cannot fully resolve.

Primary Responsibilities

- Real-Time Monitoring: Continuously watch security dashboards (SIEM) for potential threats across networks, endpoints, and other security consoles.
- Investigate escalated security incidents from Tier 1.
- Perform in-depth analysis and event correlation across multiple sources (endpoint/EDR/XDR, network, identity, cloud, email, SIEM logs, etc.).
- Support or lead containment, eradication, and recovery actions (e.g., isolate hosts, disable accounts, block IPs/domains).
- Perform basic malware analysis, network forensics, or endpoint forensics as needed.
- Build incident timelines, determine scope/impact/blast radius, and identify affected systems, accounts, and data.
- Recommend or implement detection improvements (SIEM rule tuning, playbook updates) and reduce false positives.
- Mentor/support Tier 1 analysts and escalate highly complex or high-impact cases to Tier 3.
- Sometimes contributes to limited proactive hunting.
- Documentation:



Maintain accurate logs of all findings, Investigations, actions taken, and evidence gathered in Case management tool.
- Shift Handover: Communicate ongoing investigations and suspicious patterns to the next shift to ensure continuity 24/7.
- Constant Vigilance: Real-time surveillance of network traffic and security alerts is essential to minimize downtime and prevent data breaches.

Soft Skills Requirements

- Ability to remain calm and focused during high-pressure security events.
- Excellent written communication for documenting technical findings clearly.
- Analytical mindset with strong attention to detail.

Work Schedule (Shift Requirements)
- Willingness and ability to work nights, weekends, holidays, and rotating shifts is frequently required (especially for 24/7 SOCs).
- Flexibility for additional coverage or surge support during major incidents.
- Reliability: Punctuality and commitment to the assigned shift schedule are critical for maintaining security coverage.

Required Skills

- Technical Proficiency: Understanding of networking protocols (TCP/IP, DNS, HTTP), operating systems (Windows, Linux), and common attack patterns (MITRE ATT&CK;).
- Security Tools: Familiarity with SIEM (Cribl Lake, Logscale etc), EDR (CrowdStrike, Microsoft Defender), SOAR (Phantom, BlinkOps) platforms and NDR (Vectra, Plixer, ExtraHop).
- Analytical Thinking: Ability to correlate data from multiple sources to identify anomalies and form a response hypothesis.
- Familiarity with MITRE ATT&CK;, incident response frameworks, and basic scripting (Python/PowerShell).
- Ability to correlate data, exercise judgment under time pressure, and communicate clearly with other teams.

Qualifications & Experience

- Education: Bachelor’s degree in computer science, IT, or Cybersecurity.
- Experience: 4-6 years in SOC
- Good to have Key Certifications: CompTIA Security+, CEH, CCNA Security, or CISSP etc

Pay Range INR ₹0.00 - INR ₹0.00 /Yr.

📌 Analyst 2 (Bengaluru)
🏢 Catalyst Brands India
📍 Bengaluru