Job Summary The candidate will be responsible for advanced incident investigation, threat analysis, root cause identification, and coordination with internal teams for remediation. The role requires solid analytical skills and hands-on experience with SIEM, EDR, AI and network security tools.

Key Responsibilities
Investigate and analyze escalated security alerts from L1 analysts
Perform root cause analysis and incident validation
Conduct threat hunting and identify Indicators of Compromise
Analyze firewall, VPN, endpoint, cloud, AI and identity logs
Handle phishing, malware, ransomware, and suspicious activity investigations
Tune SIEM rules and reduce false positives
Develop and update incident response playbooks
Coordinate with IT teams for containment and remediation
Prepare detailed incident reports and post-incident analysis
Participate in shift rotation

Technical Skills Required
Hands-on experience with Monitoring and SIEM tools
Robust knowledge of firewall technologies (Fortinet preferred)
Experience with EDR/XDR/DLP tools (CrowdStrike)
Understanding of TCP/IP, DNS, HTTP/S, SSL, VPN
Experience in Azure AD / M365 security monitoring
Familiarity with MITRE ATT&CK; framework
Basic scripting knowledge (PowerShell / Python preferred)





Cloud & Identity Security
Monitor Azure / AWS cloud security alerts
Investigate risky sign-ins and identity-based attacks
Knowledge of Conditional Access and MFA security policies

AI Security
Basic understanding of Generative AI and AI security risks
Knowledge of AI data protection, access control, and security governance
Understanding of prompt injection, sensitive data exposure, and AI tool security
Ability to monitor and investigate AI-related security events and policy violations

Certifications (Preferred)
CEH
SC-200 (Microsoft Security Operations)
AZ-500 (Azure Security Engineer)

Soft Skills
Solid analytical and problem-solving skills
Ability to handle high-severity incidents
Positive communication and documentation skills
Team collaboration and mentoring ability

button]:!min-w-0 [&>button]:w-[172px] [&>button]:h-[48px] md:[&>button]:w-[176px] md:[&>button]:h-[74px]"> Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Soc Analyst Bengaluru (India)
🏢 Robosoft Technologies
📍 India