We are looking for an L1 SOC Analyst to join the Cyber Fusion Centre (CFC), responsible for 24x7 security monitoring, alert triage, incident handling, and initial response across the security tool stack. This role is ideal for security professionals who are comfortable working with defined playbooks, investigating alerts, documenting incidents, and escalating security events to L2/L3 teams.

Location: Tambaram

Your Future Employer

Join a leading global financial services organization, and be part of its Cyber Fusion Centre. You will work alongside L2/L3 analysts, Threat Intelligence, Threat Hunting, and IT Operations teams across the regional security ecosystem.

Responsibilities

- Monitor and triage real-time security alerts across Splunk, XSOAR and Microsoft Defender for Endpoint (MDE).
- Perform first-level investigation to identify true positives, false positives and benign activity.
- Use Splunk queries to enrich alerts with user, asset, source/destination and timeline information.
- Log, categorize and escalate security incidents through XSOAR.
- Follow established playbooks for phishing, malware, suspicious login and endpoint security alerts.
- Execute authorized Tier-1 containment actions, including endpoint isolation through MDE.
- Escalate incidents to L2/L3 teams with explicit timelines, evidence and actions taken.
- Maintain accurate shift notes, incident documentation and handover reports.
- Support continuous improvement of SOC runbooks and knowledge-base documentation.
- Coordinate with IT Operations teams on security issues involving identity, network and endpoints.

Requirements





- 5+ years of experience in SOC, security monitoring or IT operations with security exposure.
- Strong understanding of networking fundamentals IP, DNS, ports and protocols.
- Knowledge of endpoint security fundamentals across Windows/macOS.
- Familiarity with SIEM concepts and basic Splunk SPL queries.
- Foundational understanding of the MITRE ATT&CK; framework.
- Experience with ticketing tools such as ServiceNow, Jira or similar.
- Strong written communication and incident documentation skills.
- Willingness to work in 24x7 rotational shifts, including nights, weekends and public holidays.

Good to Have

- Exposure to Palo Alto Cortex XSOAR or another SOAR platform.
- Experience with Microsoft Defender for Endpoint (MDE) or other EDR platforms.
- Security certifications such as CompTIA Security+, CySA+ or equivalent.
- Bachelor's degree in Cybersecurity, Computer Science, IT or related field.
- Experience in banking, financial services or other regulated environments.

What is in it for you

- Opportunity to work within a global Cyber Fusion Centre.
- Hands-on exposure to SIEM, SOAR and EDR security technologies.
- Experience across incident triage, response, endpoint security and threat detection.
- Collaboration with regional L2/L3,



Threat Intelligence and Threat Hunting teams.
- Build deeper expertise in enterprise cybersecurity within a regulated financial-services environment.

Reach Us

If you think this role is aligned with your career, kindly write me an email along with your updated CV on [email protected] for a confidential discussion on the role.

Disclaimer

Crescendo Global specializes in Senior to C-level niche recruitment. We are passionate about empowering job seekers and employers with an engaging memorable job search and leadership hiring experience. Crescendo Global does not discriminate based on race, religion, colour, origin, gender, sexual orientation, age, marital status, veteran status or disability status.

Note

We receive many applications daily, so it becomes difficult for us to get back to each candidate. Please assume that your profile has not been shortlisted in case you don't hear back from us in 1 week. Your patience is highly appreciated.

Scammers can misuse Crescendo Globals name for fake job offers. We never ask for money, purchases, or system upgrades. Verify all opportunities at www.crescendo-global.com and report fraud immediately. Stay alert!

Keywords: L2 SOC Analyst | SOC Analyst | Security Operations | Cybersecurity | Cyber Fusion Centre | SIEM | Splunk | SPL | XSOAR | SOAR | Microsoft Defender for Endpoint | MDE | EDR | Incident Response | Security Monitoring | Alert Triage | MITRE ATT&CK; | Threat Detection | Cybersecurity Operations | Information Security | Banking | BFSI

📌 Soc Analyst - 5+ Years- Tambaram
🏢 Crescendo Global Leadership Hiring India
📍 Tambaram