– Senior SOC Analyst

Role Overview

We are looking for a technically skilled Senior SOC Analyst with 2–4 years of experience in security monitoring, incident investigation, SIEM/SOAR operations and security platform integrations. The candidate will support SOC operations, investigate security incidents, maintain detection use cases and develop automated security workflows.

Key Responsibilities

- Monitor and investigate security alerts, events and incidents across enterprise IT infrastructure.

- Perform L1/L2 security incident triage, analysis, escalation and documentation.

- Manage and troubleshoot SIEM platforms, preferably Wazuh, including log collection, detection rules and dashboards.

- Develop and maintain SOAR automation workflows using Shuffle or equivalent platforms.

- Integrate security solutions such as firewalls, Active Directory, Microsoft Entra ID, Microsoft 365, EDR, DLP and PAM with SIEM/SOAR platforms.

- Implement and troubleshoot integrations using REST APIs, webhooks, Syslog, JSON and log forwarding mechanisms.

- Integrate SIEM/SOAR platforms with ITSM tools for automated incident creation, tracking and escalation.

- Investigate malware, phishing, suspicious logins, brute-force attacks and other security threats.

- Support threat hunting, vulnerability monitoring and MITRE ATT&CK-based; detection use cases.

- Prepare incident reports, operational dashboards, SOPs and troubleshooting documentation.

- Coordinate with infrastructure and application teams for incident investigation and remediation.





Required Technical Skills

- Hands-on experience with SIEM platforms such as Wazuh, Splunk or Microsoft Sentinel.

- Working knowledge of SOAR platforms such as Shuffle or Cortex XSOAR.

- Understanding of REST APIs, webhooks, JSON, Syslog and security tool integrations.

- Knowledge of Windows Security Events, Active Directory and Microsoft Entra ID.

- Understanding of firewalls, VPN, TCP/IP, DNS and endpoint security.

- Familiarity with EDR, DLP, PAM and vulnerability management solutions.

- Basic scripting knowledge in Python or PowerShell.

- Knowledge of incident response processes and MITRE ATT&CK; framework.

Experience and Qualifications

- 2–4 years of hands-on experience in SOC or Security Operations.

- Practical experience in SIEM monitoring, incident investigation and security event analysis.

- Exposure to SIEM/SOAR implementation, integration and troubleshooting.

- Positive analytical, communication and documentation skills.

Preferred Certifications

- Microsoft SC-200

- CompTIA Security / CySA

- Certified SOC Analyst (CSA)

- Blue Team Level 1 (BTL1)

Preferred Tools and Technologies

Wazuh, Shuffle SOAR, Sophos Firewall, Microsoft Entra ID, Active Directory, Microsoft 365, Sophos Endpoint, Microsoft Defender, Tenable, CyberArk and ITSM platforms.

Ideal Candidate: Someone capable of handling L1/L2 security investigations, troubleshooting SIEM integrations, developing SOAR workflows and supporting end-to-end SOC operations.

📌 Senior Analyst (Chennai)
🏢 Metayb Private
📍 Chennai