Job Description:

- Monitor, investigate, and respond to security alerts and incidents as part of SOC L2 operations.

- Create, implement, fine-tune, and optimize SIEM detection use cases to improve detection accuracy and reduce false positives.

- Develop and maintain Splunk dashboards, alerts, correlation searches, and security monitoring rules.

- Perform root cause analysis (RCA) for security incidents and recommend corrective and preventive actions.

- Develop and maintain SOC SOPs, incident response playbooks, and operational runbooks.

- Conduct proactive threat hunting to identify suspicious activities, indicators of compromise (IOCs), and emerging threats.

- Support threat detection and response activities, including incident validation, investigation, containment, escalation, and remediation.





- Contribute to detection engineering by improving detection logic and mapping threats to relevant attack techniques.

- Leverage Cyber Threat Intelligence (CTI) to enrich investigations and strengthen detection capabilities.

- Identify opportunities for security automation to improve incident response efficiency and reduce manual effort.

- Participate in tabletop exercises and incident response simulations to assess SOC readiness.

- Collaborate with security, infrastructure, and other technical teams to ensure timely incident resolution and continuous improvement of SOC processes.

📌 Soc (Noida)
🏢 Acme Services Private
📍 Noida