SOC Analyst – L2

Location: Bengaluru

Experience: 2–3 Years

Employment Type: Full-time

Job Summary

We are looking for an experienced SOC Analyst – L2 with strong hands-on expertise in Microsoft Sentinel and Security Operations. The candidate will be responsible for monitoring, investigating, and responding to security incidents, along with configuring and optimizing Sentinel detection capabilities.

The ideal candidate should have practical experience in Microsoft Sentinel Analytics Rules, Detection Rules, Workbooks, Incident Investigation, KQL, and alert/incident management, along with a positive understanding of basic networking and cybersecurity concepts.

Key Responsibilities

- Monitor and manage security incidents and alerts using Microsoft Sentinel.
- Perform L2-level incident investigation, analysis, triage, and response.
- Create, configure, and maintain Microsoft Sentinel Analytics Rules and Detection Rules.
- Develop and optimize Microsoft Sentinel Workbooks for security monitoring, reporting, and visualization.
- Write and modify KQL queries for threat detection, investigation, log analysis, and troubleshooting.
- Investigate security incidents by correlating events and logs from multiple data sources.
- Analyze suspicious activities, security alerts, Indicators of Compromise (IOCs), and potential threats.
- Perform root-cause analysis and determine the scope and impact of security incidents.
- Identify and reduce false positives by tuning analytics and detection rules.
- Configure and manage Sentinel data connectors and ensure appropriate log ingestion.
- Perform basic threat hunting using Sentinel and KQL.
- Work with MITRE ATT&CK; techniques and map detected activities to relevant attack techniques.




- Escalate critical or complex incidents to L3 / Incident Response teams when required.
- Coordinate with IT, network, cloud, and infrastructure teams for incident containment and remediation.
- Prepare detailed incident investigation reports and shift handover documentation.
- Monitor the health and effectiveness of security monitoring and detection mechanisms.
- Continuously improve detection use cases, dashboards, workbooks, and security monitoring processes.

Required Technical Skills

- 2–3 years of hands-on experience in SOC / Security Operations.
- Strong hands-on experience with Microsoft Sentinel.
- Practical experience in:
- Microsoft Sentinel Analytics Rules
- Detection Rules / Use Cases
- Workbooks
- KQL (Kusto Query Language)
- Incident Investigation
- Alert Triage and Analysis
- Data Connectors and Log Sources
- Threat Hunting
- Detection Rule Tuning
- Good understanding of Microsoft security ecosystem and cloud security concepts.
- Good knowledge of Windows and Linux logs and security event analysis.
- Basic understanding of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, ports, and common network protocols.
- Good understanding of common cybersecurity threats such as phishing, malware, brute-force attacks, credential attacks, suspicious PowerShell activity, and unauthorized access.
- Understanding of MITRE ATT&CK; Framework.
- Knowledge of EDR/XDR and endpoint security concepts is preferred.
- Strong analytical and troubleshooting skills.

Qualifications

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Relevant cybersecurity certifications such as SC-200, AZ-500, Security+, CEH, CySA+ or equivalent will be an advantage.

Benefits:
- Health insurance
- Provident Fund

Work Location: In person

📌 SOC Analyst (Bengaluru)
🏢 Skysecure Technologies Private
📍 Bengaluru