Position: SOC L3 Engineer

Location: Hyderabad

Experience: 9-14Years

Mandatory: Minimum 3 years of hands-on SOC L3 experience

Who We Are:

MGT is a leading provider of technology and advisory solutions serving state, local, and education government agencies (SLED) across the United States. With nearly 1,200 employees, MGT partners with thousands of public-sector agencies to improve technology, operational, and economic performance and help communities thrive.

MGT supports mission-critical needs including securing critical networks, addressing human capital and fiscal challenges, strengthening education systems, and advancing equity. Founded in 1975, MGT has continuously expanded its capabilities through strategic acquisitions and investments in specialized technology and advisory services. In 2025, MGT celebrated its 50th anniversary.

Job Summary:

We are looking for an experienced SOC L3 Engineer to join our security operations team. The candidate will be responsible for advanced security monitoring, threat hunting, incident response, digital forensics, SIEM engineering, and handling critical security incidents in a large enterprise environment.

The ideal candidate should have strong hands-on experience working at the L3/Senior SOC level, with the ability to investigate complex security incidents, perform forensic analysis, develop detection logic, and provide technical guidance to junior SOC analysts.

Key Responsibilities:

- Monitor, detect, investigate, and respond to advanced security threats and vulnerabilities.
- Serve as the L3/highest level of escalation for security incidents.




- Perform advanced incident investigation, containment, eradication, and recovery activities.
- Conduct digital forensics and evidence collection on compromised systems.
- Perform proactive threat hunting across enterprise networks and systems.
- Design and implement SIEM correlation rules and security detection logic.
- Develop and fine-tune security alerts to improve threat detection and reduce false positives.
- Collect, correlate, and analyze security-relevant logs from network, system, application, endpoint, and security platforms.
- Utilize threat intelligence from multiple sources to identify emerging threats and improve detection capabilities.
- Develop and implement appropriate security countermeasures in coordination with Network Security and other technical teams.
- Investigate advanced attacks, anomalies, vulnerabilities, and security intrusions.
- Mentor and provide technical guidance to junior-level SOC analysts.
- Support security tools and technologies used by Security Operations.
- Develop scripts using Python or other scripting languages to automate security operations where required.
- Create and maintain regular expressions for SIEM correlation and detection use cases.




- Maintain proper incident documentation, investigation findings, and forensic evidence.
- Participate in 24x7 SOC operations, on-call rotations, weekends, and evening shifts as required.

Mandatory Requirements:

- Minimum 3 years of hands-on experience specifically in a SOC L3 / Senior SOC Analyst / L3 Security Operations role.
- Strong experience in Security Incident Response and Investigation.
- Solid knowledge of SIEM platforms and SIEM content/correlation rule creation.
- Hands-on experience with Threat Hunting and Threat Intelligence.
- Strong understanding of network and system security vulnerabilities, exploits, attacks, and anomalies.
- Hands-on experience with Digital Forensics / DFIR.
- Experience handling security incidents in large enterprise environments.
- Strong understanding of network security and network operations.
- Experience with regular expressions (Regex) for security correlation and detection.
- Knowledge of Python or other scripting languages.
- Strong analytical, troubleshooting, communication, and incident-management skills.

Preferred Qualifications:

- CISSP
- GCIH
- GCFE
- GCFA
- GCTI
- CHFI
- Experience with enterprise security operations.
- Experience with SIEM content development and detection engineering.
- Experience with EDR/XDR, network security, threat intelligence, and forensic tools.

Working Conditions:

- Hyderabad Work From Office
- 24x7 Security Operations support
- Rotational shifts, including weekends/evenings
- On-call rotation
- Minimal travel

📌 SOC Analyst (Hyderabad)
🏢 Amerisource Solutions
📍 Hyderabad