SOC Security Analyst Level 2 - SIEM

Job description

****Your Role and Responsibilities:**** As SOC Analyst Level 2 & Threat Hunter, you play a vital role in safeguarding an organization's digital infrastructure by identifying, analyzing, and mitigating cyber threats. This position involves using a variety of cybersecurity tools to monitor, prioritize, investigate, and respond to security incidents. **Your primary responsibilities will include**: - Perform advanced analysis of security events and logs across multiple data sources. - Correlate events, conduct deep log reviews, analyze alerts, and validate true positives vs. false positives. - Execute incident triage, classification, and prioritization based on risk and impact. - Conduct advanced root cause analysis (RCA) to identify how incidents originated and evolved. - Analyze IOCs and threat vectors, supporting detection and investigation activities. - Analyze Network and Endpoint Events: Interpret security tools and logs from Windows, MAC, and Linux systems to identify potential threats. - Apply threat intelligence feeds to enhance analysis for specific clients and industries. - Identify and interpret signals of exploitation, vulnerabilities, and security gaps. - Collaborate with team members to tune and optimize SIEM/XDR platforms. - Provide Actionable Recommendations: Deliver recommendations and responses to clients to enhance their security posture. - Manage technical communication and incident escalation in accordance with defined procedures. - Performing Intel base Threat Hunting using multiple Log Sources - Supporting in a 24x7 Security Operation Centre (SOC) environment ****Required Education:**** Bachelor's Degree ****Preferred education**** Bachelor's Degree ****Required Technical and Professional Expertise:**** - Should be BE/B.Tech /MCA/BCA with minimum 5-8 years of expiration in cloud security or cloud infrastructure roles. - Strong experience in advanced log and event analysis. - Proven ability to perform alert correlation, deep investigation, and incident validation. - Hands-on experience with incident triage, classification, and prioritization. - Strong analytical skills to perform root cause analysis. - Experience analyzing malicious behaviors, IOCs, and attack vectors. - Experience in managing SOAR related task - Practical knowledge of threat intelligence consumption and application to detection. - Solid understanding of MITRE ATT&CK framework. - Ability to recognize exploitation techniques, vulnerabilities, and security control gaps. - Strong technical communication skills and experience handling incident escalation. - Team-oriented mindset with experience collaborating on SIEM/XDR tuning and optimization. **Preferred Technical and Professional Experience:** - Should be BE/B.Tech /MCA/BCA with minimum 5-8 years of expiration in cloud security or cloud infrastructure roles. - Must have hands-on experience with Q-Radar SIEM, SOAR. - Strong understanding of cloud security frameworks and best practices (e.g., CIS Benchmarks, NIST, ISO 27001). - Experience with security incident response and remediation. ****Years of Experience:**** 3 - 8