Analyst 2

Catalyst Brands India; Bengaluru; In loco; INR 1.200.000 - 1.800.000; Tempo pieno

Descrizione del lavoro

Catalyst Brands India seeks an experienced SOC Analyst (Analyst 2) to join its Cybersecurity Team in Bengaluru. You will monitor security dashboards, investigate escalated incidents, and support containment and recovery actions across networks, endpoints, and cloud services.

The role requires 4–6 years in a SOC, strong knowledge of MITRE ATT&CK, SIEM/EDR/SOAR tools, and the ability to document findings clearly while guiding Tier 1 analysts. Shift work, including nights and weekends, is expected.

Competenze

• Bachelor's degree in CS/IT/Cybersecurity or equivalent.
• 4–6 years in a SOC with hands-on incident response experience.
• Certifications such as Security+, CEH, CCNA Security, or CISSP are desirable.

Mansioni

• Monitor security dashboards and correlate alerts across networks, endpoints, and cloud.
• Investigate escalated incidents from Tier 1 and drive containment actions.
• Perform basic malware analysis, network/endpoint forensics as needed.
• Build incident timelines and determine scope, impact, and blast radius.
• Tune SIEM rules, improve playbooks, and reduce false positives.
• Mentor Tier 1 analysts and escalate complex cases to Tier 3 as needed.
• Document findings and actions in the case management system.

Conoscenze

Networking basics

Windows OS

Linux OS

MITRE ATT&CK

SIEM tools

EDR tools

SOAR tools

NDR tools

Python scripting

PowerShell scripting

Data correlation

Communication skills

Formazione

Bachelor's degree in CS/IT/Cybersecurity

Strumenti

Cribl Lake

Logscale

CrowdStrike

Microsoft Defender

Phantom

BlinkOps

Vectra

Plixer

ExtraHop

Descrizione del lavoro

Overview

SOC Analyst in Cybersecurity Team (Analyst 2)

About Catalyst Brands

Catalyst Brands is a leading U.S. retail company formed through the merger of JCPenney and SPARC Group. We bring together iconic names such as Aéropostale, Brooks Brothers, Lucky Brand, Nautica, and JCPenney under one powerful platform. With nearly 1,800 stores, a strong e-commerce presence, and a customer base of over 60 million, we are redefining modern retail through scale, innovation, and heritage. Backed by industry leaders,

Overview

SOC Analyst in Cybersecurity Team (Analyst 2)

About Catalyst Brands

Catalyst Brands is a leading U.S. retail company formed through the merger of JCPenney and SPARC Group. We bring together iconic names such as Aéropostale, Brooks Brothers, Lucky Brand, Nautica, and JCPenney under one powerful platform. With nearly 1,800 stores, a strong e-commerce presence, and a customer base of over 60 million, we are redefining modern retail through scale, innovation, and heritage. Backed by industry leaders,

Catalyst Brands offers a dynamic environment where talent can thrive and help shape the future of fashion and retail.

Role Overview

A SOC (Security Operations Center) L2 Analyst, also known as Tier 2 or Analyst 2, is the intermediate tier in the common three-tier SOC model for Catalyst Brands Cybersecurity Team. Their primary goal is to handle escalated alerts and confirmed or complex incidents that Tier 1 cannot fully resolve.

Primary Responsibilities

• Real-Time Monitoring: Continuously watch security dashboards (SIEM) for potential threats across networks, endpoints, and other security consoles.
• Investigate escalated security incidents from Tier 1.
• Perform in-depth analysis and event correlation across multiple sources (endpoint/EDR/XDR, network, identity, cloud, email, SIEM logs, etc.).
• Support or lead containment, eradication, and recovery actions (e.g., isolate hosts, disable accounts, block IPs/domains).
• Perform basic malware analysis, network forensics, or endpoint forensics as needed.
• Build incident timelines, determine scope/impact/blast radius, and identify affected systems, accounts, and data.
• Recommend or implement detection improvements (SIEM rule tuning, playbook updates) and reduce false positives.
• Mentor/support Tier 1 analysts and elevate highly complex or high-impact cases to Tier 3.
• Sometimes contributes to limited proactive hunting.
• Documentation: Maintain accurate logs of all findings, Investigations, actions taken, and evidence gathered in Case management tool.
• Shift Handover: Communicate ongoing investigations and suspicious patterns to the next shift to ensure continuity 24/7.
• Constant Vigilance: Real-time surveillance of network traffic and security alerts is essential to minimize downtime and prevent data breaches.

Soft Skills Requirements

• Ability to remain calm and focused during high-pressure security events.
• Excellent written communication for documenting technical findings clearly.
• Analytical mindset with strong attention to detail.

Work Schedule (Shift Requirements)

• Willingness and ability to work nights, weekends, holidays, and rotating shifts is frequently required (especially for 24/7 SOCs).
• Flexibility for additional coverage or surge support during major incidents.
• Reliability: Punctuality and commitment to the assigned shift schedule are critical for maintaining security coverage.

Required Skills

• Technical Proficiency: Understanding of networking protocols (TCP/IP, DNS, HTTP), operating systems (Windows, Linux), and common attack patterns (MITRE ATT&CK).
• Security Tools: Familiarity with SIEM (Cribl Lake, Logscale etc), EDR (CrowdStrike, Microsoft Defender), SOAR (Phantom, BlinkOps) platforms and NDR (Vectra, Plixer, ExtraHop).
• Analytical Thinking: Ability to correlate data from multiple sources to identify anomalies and form a response hypothesis.
• Familiarity with MITRE ATT&CK, incident response frameworks, and basic scripting (Python/PowerShell).
• Ability to correlate data, exercise judgment under time pressure, and communicate clearly with other teams.

Qualifications & Experience

• Education: Bachelor's degree in computer science, IT, or Cybersecurity.
• Experience: 4-6 years in SOC
• Good to have Key Certifications: CompTIA Security+, CEH, CCNA Security, or CISSP etc

Pay Range

INR ₹0.00 - INR ₹0.00 /Yr.