Security Analyst Level 2 - Siem & Soar

Job description

Your Role and Responsibilities: As SOC Analyst Level 2 & Threat Hunter, you play a vital role in safeguarding an organization's digital infrastructure by identifying, analyzing, and mitigating cyber threats. This position involves using a variety of cybersecurity tools to monitor, prioritize, investigate, and respond to security incidents. Your primary responsibilities will include: • Perform advanced analysis of security events and logs across multiple data sources. • Correlate events, conduct deep log reviews, analyze alerts, and validate true positives vs. false positives. • Execute incident triage, classification, and prioritization based on risk and impact. • Conduct advanced root cause analysis (RCA) to identify how incidents originated and evolved. • Analyze IOCs and threat vectors, supporting detection and investigation activities. Analyze Network and Endpoint Events: Interpret security tools and logs from Windows, MAC, and Linux systems to identify potential threats. • Apply threat intelligence feeds to enhance analysis for specific clients and industries. • Identify and interpret signals of exploitation, vulnerabilities, and security gaps. • Collaborate with team members to tune and optimize SIEM/XDR platforms. Provide Actionable Recommendations: Deliver recommendations and responses to clients to enhance their security posture. • Manage technical communication and incident escalation in accordance with defined procedures. • Performing Intel base Threat Hunting using multiple Log Sources • Supporting in a 24x7 Security Operation Centre (SOC) environment. • Develop and maintain automated playbooks, workflows, and response scripts within the SOAR platform. • Collaborate with clients to understand their security requirements and business objectives, refining playbooks based on specific use cases. • Design and develop tailored SOAR playbooks aligned with clients' infrastructure and incident response needs. Required Education: Bachelor's Degree Preferred education Bachelor's Degree Required Technical and Professional Expertise: • Should be BE/B.Tech /MCA/BCA with minimum 5-8 years of expiration in cloud security or cloud infrastructure roles. • Strong experience in advanced log and event analysis. • Proven ability to perform alert correlation, deep investigation, and incident validation. • Hands-on experience with incident triage, classification, and prioritization. • Strong analytical skills to perform root cause analysis. • Experience analyzing malicious behaviors, IOCs, and attack vectors. • Experience in managing SOAR related task • Practical knowledge of threat intelligence consumption and application to detection. • Solid understanding of MITRE ATT&CK framework. • Ability to recognize exploitation techniques, vulnerabilities, and security control gaps. Preferred Technical and Professional Experience: • Should be BE/B.Tech /MCA/BCA • Good Communication skills • Client handling exposure **Years of Experience:** 5 - 8