Security Operations Center Analyst (L2 / L3) || Only Immediate Joiner

Role : SOC Analyst (L2 / L3)

Experience : 4 -12 Year

Location : Mumbai

Job Description :

Key Responsibilities :

Perform real-time security monitoring, analysis, and incident response for enterprise systems, networks, and applications.

Investigate security alerts and correlate events using SIEM tools (e.g., Splunk, QRadar, ArcSight, Azure Sentinel).

Conduct threat hunting, log analysis, and root cause investigations for potential or actual incidents.

Manage the incident response lifecycle — triage, containment, eradication, recovery, and post-incident review.

Escalate incidents to higher levels (L3 or CSIRT) as per defined playbooks.

Develop and tune correlation rules, dashboards, and detection use cases .

Collaborate with IT, network, and application teams to mitigate vulnerabilities.

Generate incident reports , maintain SOC documentation, and contribute to process improvements.

Participate in security assessments, vulnerability management, and threat intelligence integration .

Mentor junior analysts (L1 / L2) and help strengthen SOC operational maturity.

Required Skills and Qualifications :

Bachelor’s degree in Computer Science, Information Security, or related discipline.

4+ years of total IT / security experience, with minimum 4+ years in SOC operations .

Proficient in SIEM platforms such as Splunk, IBM QRadar, ArcSight, or Azure Sentinel.

Strong understanding of network protocols, firewalls, proxies, endpoint security, and malware analysis.

Expertise in incident response, log analysis, and threat intelligence correlation.

Familiarity with MITRE ATT&CK framework, NIST, and ISO 27001 standards.

Experience with EDR tools (CrowdStrike, Carbon Black, SentinelOne, etc.).

Knowledge of Windows, Linux, and cloud security (AWS, Azure) environments.

Excellent analytical thinking, documentation, and communication skills.