SOC Security Analyst Level 2 - SIEM

Job description

**Your Role and Responsibilities:** As SOC Analyst Level 2 & Threat Hunter, you play a vital role in safeguarding an organization's digital infrastructure by identifying, analyzing, and mitigating cyber threats. This position involves using a variety of cybersecurity tools to monitor, prioritize, investigate, and respond to security incidents. Your primary responsibilities will include: • Perform advanced analysis of security events and logs across multiple data sources. • Correlate events, conduct deep log reviews, analyze alerts, and validate true positives vs. false positives. • Execute incident triage, classification, and prioritization based on risk and impact. • Conduct advanced root cause analysis (RCA) to identify how incidents originated and evolved. • Analyze IOCs and threat vectors, supporting detection and investigation activities. • Analyze Network and Endpoint Events: Interpret security tools and logs from Windows, MAC, and Linux systems to identify potential threats. • Apply threat intelligence feeds to enhance analysis for specific clients and industries. • Identify and interpret signals of exploitation, vulnerabilities, and security gaps. • Collaborate with team members to tune and optimize SIEM/XDR platforms. • Provide Actionable Recommendations: Deliver recommendations and responses to clients to enhance their security posture. • Manage technical communication and incident escalation in accordance with defined procedures. • Performing Intel base Threat Hunting using multiple Log Sources • Supporting in a 24x7 Security Operation Centre (SOC) environment **Required Education:** Bachelor's Degree **Preferred education** Bachelor's Degree **Required Technical and Professional Expertise:** • Should be BE/B.Tech /MCA/BCA with minimum 5-8 years of expiration in cloud security or cloud infrastructure roles. • Strong experience in advanced log and event analysis. • Proven ability to perform alert correlation, deep investigation, and incident validation. • Hands-on experience with incident triage, classification, and prioritization. • Strong analytical skills to perform root cause analysis. • Experience analyzing malicious behaviors, IOCs, and attack vectors. • Experience in managing SOAR related task • Practical knowledge of threat intelligence consumption and application to detection. • Solid understanding of MITRE ATT&CK framework. • Ability to recognize exploitation techniques, vulnerabilities, and security control gaps. • Strong technical communication skills and experience handling incident escalation. • Team-oriented mindset with experience collaborating on SIEM/XDR tuning and optimization. Preferred Technical and Professional Experience: • Should be BE/B.Tech /MCA/BCA with minimum 5-8 years of expiration in cloud security or cloud infrastructure roles. • Must have hands-on experience with Q-Radar SIEM, SOAR. • Strong understanding of cloud security frameworks and best practices (e.g., CIS Benchmarks, NIST, ISO 27001). • Experience with security incident response and remediation. **Years of Experience:** 3 - 8