Job Summary

Monitor security alerts and events using SIEM tools like Splunk/Sentinel/Qradar. Work with EDR/XDR solutions like CrowdStrike, Defender, SentinelOne, Cortex XDR. Investigate and respond to security incidents (L2 level analysis).

Perform log analysis from multiple sources (firewalls, endpoints, servers, cloud). Conduct threat hunting and identify potential risks. Escalate critical incidents and coordinate with relevant teams. Develop and improve incident response playbooks.

Analyze malware, phishing attempts, and suspicious activities. Ensure compliance with security policies and procedures. Generate reports and dashboards for management review.

Responsibilities

- Monitor security alerts and events using SIEM tools like Splunk/Sentinel/Qradar
- Work with EDR/XDR solutions like CrowdStrike, Defender, SentinelOne, Cortex XDR
- Investigate and respond to security incidents (L2 level analysis)
- Perform log analysis from multiple sources (firewalls, endpoints, servers, cloud)
- Conduct threat hunting and identify potential risks
- Escalate critical incidents and coordinate with relevant teams
- Develop and improve incident response playbooks
- Analyze malware, phishing attempts, and suspicious activities




- Ensure compliance with security policies and procedures
- Generate reports and dashboards for management review

Requirements

- 4+ years of experience in SOC / Cybersecurity operations
- Strong knowledge of SIEM tools (e.g., Splunk, QRadar, Sentinel)
- Experience with EDR/XDR solutions (e.g., CrowdStrike, Defender, SentinelOne)
- Good understanding of networking concepts (TCP/IP, DNS, VPN, Firewalls)
- Familiarity with security frameworks (MITRE ATTCK, NIST, ISO 27001)
- Hands-on experience in incident response and log analysis
- Knowledge of threat intelligence platforms and tools
- Robust analytical and problem-solving skills

Preferred Qualifications

- Certifications such as CEH, Security+, CySA+, or equivalent

- Experience with SOAR platforms
- Basic scripting knowledge (Python, PowerShell, Bash)
- Cloud security knowledge (Azure, AWS, GCP)

Disclaimer: This job posting and Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Cyber Security SOC Analyst (Bengaluru)
🏢 Ferilion Labs
📍 Bengaluru