SOC Analyst L3

Job description

Technical Specialist / SOC Analyst L3 (Cyber Security) We are looking for an experienced Cyber Security professional with strong expertise in Security Operations Center (SOC), SIEM, Incident Response, and Threat Detection. In this role, you will act as a senior SOC analyst and technical expert responsible for monitoring, investigating, and responding to complex security incidents while continuously improving detection capabilities and SOC processes. What Youll Do • Monitor, investigate, and respond to cyber security incidents • Analyze security alerts, logs, and suspicious activities across networks, endpoints, firewalls, and cloud environments • Work on SIEM, EDR/XDR, IDS/IPS, and other SOC security tools • Create and fine-tune detection rules, dashboards, alerts, and reports • Develop custom queries (KQL/Splunk queries etc.) for threat detection and investigations • Reduce false positives and improve SOC detection efficiency • Perform root cause analysis and incident investigations • Support threat hunting and vulnerability analysis activities • Troubleshoot issues related to SIEM/log collection/connectors • Prepare SOC reports, dashboards, and customer updates • Work closely with customers/internal teams to provide recommendations and remediation guidance • Support automation, playbook, and process improvement initiatives • Mentor junior SOC analysts and act as an escalation point for complex issues Required Skills & Experience • 8–12 years of experience in Cyber Security / SOC Operations • Strong hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, etc. • Experience with EDR/XDR tools such as Microsoft Defender for Endpoint or CrowdStrike Falcon • Strong knowledge of Incident Response, Threat Detection, Threat Hunting, and Log Analysis • Hands-on experience creating SIEM correlation rules, dashboards, and reports • Good understanding of networking, firewalls, malware analysis, and security monitoring • Experience working with MITRE ATT&CK framework • Strong troubleshooting and analytical skills • Good communication and stakeholder management skills Good to Have • Experience with KQL/Splunk query language • Knowledge of security standards/frameworks like NIST, ISO 27001, HIPAA, FedRAMP • Relevant cyber security certifications such as CISSP, CEH, Security+, GCIH, or Microsoft Security certifications Ideal Candidate We are looking for someone who has worked in a mature SOC environment and can independently handle complex security investigations, improve detection capabilities, and support overall SOC operations and transformation initiatives.