Role & responsibilities

We are looking for an experienced SOC Analyst L2 to join our Security Operations team. The role will primarily focus on Splunk-

based security monitoring, alert investigation, incident response, threat analysis, and incident management across enterprise

environments.

Key Responsibilities

• Monitor, triage, investigate, and respond to security alerts using Splunk Mission Control.

• Perform L2 incident investigation from detection through containment, remediation, and closure.

• Investigate endpoint threats using SentinelOne EDR, including process, file, network, and IOC analysis.

• Investigate Okta authentication events, account compromise, MFA anomalies, and suspicious logins.

• Analyze AWS security events, IAM activity, and suspicious cloud access.

• Investigate Netskope alerts and Mimecast email-security incidents.

• Perform phishing email/URL analysis, including headers, sender authentication, URLs, attachments, and reputation.

• Document incidents, evidence, actions, and timelines in ServiceNow and escalate high-severity cases.

• Identify IOCs and support threat hunting,



detection tuning, and Incident Response playbooks.

Required Skills

• Strong hands-on experience with Splunk / Splunk Mission Control and Incident Response.

• Experience with SentinelOne EDR, Okta, AWS cloud, Netskope, and Mimecast Email Security.

• Strong phishing analysis, email-header, URL, and IOC investigation skills.

• Understanding of Windows security, networking, authentication, MITRE ATT&CK;, and common attack techniques.

Experience

5–8+ years in SOC / Cybersecurity Operations, with strong L2 alert investigation and Incident Response experience.

Ethics & Professionalism: Maintain high standards of integrity, confidentiality, accountability, and qualified conduct. Handle

security and customer data responsibly, follow organizational policies and privacy requirements, maintain accurate investigation

records, avoid misuse of privileged access, and ensure all security decisions are evidence-based, objective, and aligned with

security best practices.

📌 SOC Analyst (Hyderabad)
🏢 Sutherland
📍 Hyderabad