SOC Analyst — Threat Hunting & Incident Investigation

Company: Sveltetech Technologies Location: Gurugram (Sector 61, Golf Course Extension Road) — split between Sveltetech office and client sites as per project requirements - Delhi

About Sveltetech Technologies

Sveltetech Technologies is a Gurugram-headquartered technology firm delivering cybersecurity, application development, and AI-powered solutions to enterprise, government, and law-enforcement clients in India and overseas, founded in 2020. Its cybersecurity practice spans SOC operations, VAPT, network security, and offensive security, alongside a product portfolio including encrypted communication platforms, geospatial intelligence tooling, secure VPN, and IPDR-based investigative platforms.

About the Role

Sveltetech is building out a high-calibre threat detection and response team and is hiring an experienced SOC Analyst who operates well beyond alert monitoring — someone who thinks like an investigator across threat hunting, incident investigation, and detection engineering. You'll work hands-on with Elastic/ELK SIEM as the primary platform, owning the full detection lifecycle from log ingestion through rule creation, tuning, and investigation, while also adapting to client-specific platforms like Splunk, QRadar, or Sentinel as engagements require.

What You Will Do

1. Perform proactive threat hunting across enterprise and client environments to identify advanced threats, lateral movement, and suspicious behaviour.
2. Investigate security incidents end-to-end, analyse attack patterns, and conduct root cause analysis.
3.



Work hands-on in Elastic/ELK SIEM for log onboarding, ingestion pipeline validation, parsing, field mapping, alert creation, and investigation workflows.
4. Create, test, tune, and maintain custom detection rules, correlation logic, and dashboards mapped to the MITRE ATT&CK; framework.
5. Conduct adversary simulation and purple-teaming exercises alongside the offensive security team.
6. Perform malware analysis, IOC correlation, and threat-intelligence-driven investigations.
7. Prepare incident reports and technical findings for both technical and executive audiences.
8. Coordinate with internal teams and clients during active security incidents.

What We're Looking For

1. 7+ years of experience in SOC operations, threat hunting, incident response, or cybersecurity operations.
2. Mandatory hands-on experience with Elastic/ELK SIEM — log ingestion, parsing, index/data stream handling, custom detection rule creation, alert tuning, dashboards, and investigation workflows.
3. Active, current relevant certifications (e.g. CEH, CHFI, GCIA, GCIH, GCFA, Elastic Security, Splunk, QRadar, or equivalent) — must be valid, not expired.
4. Solid working knowledge of MITRE ATT&CK;, attack techniques, and threat actor methodologies.
5. Experience with other SIEM platforms (Splunk, QRadar, Microsoft Sentinel, Wazuh) for client-specific deployments.
6. Solid understanding of Windows, Linux, Active Directory, networking, and cloud security concepts.
7. Experience with threat intelligence platforms and IOC enrichment/analysis.
8. Comfortable with occasional extended-hours coverage during active security incidents.

📌 SOC Analyst — Threat Hunting & Incident Investigation (Gurugram)
🏢 Careerfit.ai
📍 Gurugram