:-

An L3 SOC Analyst is a senior member of the Security Operations Center (SOC) team. Their role extends beyond monitoring and analysis to include leadership, technical expertise, and incident resolution. As an L3 Analyst, youll play a critical role in maintaining the organization’s security posture and ensuring effective incident response.

Roles&Responsibilities; :-

1. Management of SIEM solution.
2. Investigate, remediate threats and alerts escalated from L2 for additional context / risk assessments.
3. Escalate significant or complex threats to regional / global leads from client end.
4. Identify potential root cause of Incidents, provide remediation steps for Medium, high sev incidents.
5. Recommend and implement tuning enhancement to defined alerting rules and SOPs
6. Responsible for conducting information security investigations as a result of security incidents identified by the tier 2 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, SNOW Tickets, Email and MDE),
7. Act as a point of escalation for tier 2 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques.




8. Create SMTD documents as per the requirement.
9. Perform targeted threat intel analysis to determine a future attack planned against org and give inputs for recent use cases.
10. Validation and Notification of Incidents to IR/SOC lead
11. Ensure to take up the P1/P2 incidents and troubleshoot the same.

Experience:-6-8 years of experience with the SIEM platform

1. Responsible for in-depth analysis of events discovered by L2 Operators
2. Working within the information security field, with emphasis on security operations, incident management, intrusion detection, firewall deployment, and security event analysis
3. Experience with security device installations, configuration, and troubleshooting (e.g., firewall, IDS, etc.)
4. Experience in Threat hunting and Threat Intelligence .
5. Strong leadership skills to guide junior analysts and Effective communication to collaborate with other teams and stakeholders.
6. Analyze root causes and recommend preventive measures.
7. Experience in Advance SIEM Skills and Optimize and fine-tune security tool (SIEM).

📌 Security Information Event Management (SIEM) (Bengaluru)
🏢 Wipro
📍 Bengaluru