- Senior SOC Analyst Role Overview

We are looking for a technically skilled Senior SOC Analyst with 2-4 years of experience in security monitoring, incident investigation, SIEM/SOAR operations and security platform integrations. The candidate will support SOC operations, investigate security incidents, maintain detection use cases and develop automated security workflows.

Key Responsibilities

- Monitor and investigate security alerts, events and incidents across enterprise IT infrastructure.
- Perform L1/L2 security incident triage, analysis, escalation and documentation.
- Manage and troubleshoot SIEM platforms, preferably Wazuh, including log collection, detection rules and dashboards.
- Develop and maintain SOAR automation workflows using Shuffle or equivalent platforms.
- Integrate security solutions such as firewalls, Active Directory, Microsoft Entra ID, Microsoft 365, EDR, DLP and PAM with SIEM/SOAR platforms.
- Implement and troubleshoot integrations using REST APIs, webhooks, Syslog, JSON and log forwarding mechanisms.
- Integrate SIEM/SOAR platforms with ITSM tools for automated incident creation, tracking and escalation.
- Investigate malware, phishing, suspicious logins, brute-force attacks and other security threats.
- Support threat hunting, vulnerability monitoring and MITRE ATT&CK-based; detection use cases.
- Prepare incident reports, operational dashboards, SOPs and troubleshooting documentation.
- Coordinate with infrastructure and application teams for incident investigation and remediation.

Required Technical Skills
- Hands-on experience with SIEM platforms such as Wazuh, Splunk or Microsoft Sentinel.




- Working knowledge of SOAR platforms such as Shuffle or Cortex XSOAR.
- Understanding of REST APIs, webhooks, JSON, Syslog and security tool integrations.
- Knowledge of Windows Security Events, Active Directory and Microsoft Entra ID.
- Understanding of firewalls, VPN, TCP/IP, DNS and endpoint security.
- Familiarity with EDR, DLP, PAM and vulnerability management solutions.
- Basic scripting knowledge in Python or PowerShell.
- Knowledge of incident response processes and MITRE ATT&CK; framework.

Experience and Qualifications
- 2-4 years of hands-on experience in SOC or Security Operations.
- Practical experience in SIEM monitoring, incident investigation and security event analysis.
- Exposure to SIEM/SOAR implementation, integration and troubleshooting.
- Valuable analytical, communication and documentation skills.

Preferred Certifications
- Microsoft SC-200
- CompTIA Security+ / CySA+
- Certified SOC Analyst (CSA)
- Blue Team Level 1 (BTL1)

Preferred Tools and Technologies Wazuh, Shuffle SOAR, Sophos Firewall, Microsoft Entra ID, Active Directory, Microsoft 365, Sophos Endpoint, Microsoft Defender, Tenable, CyberArk and ITSM platforms.

Ideal Candidate: Someone capable of handling L1/L2 security investigations, troubleshooting SIEM integrations, developing SOAR workflows and supporting end-to-end SOC operations.

Required Skills

Incident Response SOAR SIEM Vulnerability Management Scripting & Operating Systems MITRE ATT&CK; Security Integration

This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Senior Analyst (Chennai)
🏢 Metayb
📍 Chennai