Analyst 2

JCPenney; Bengaluru; On-site; INR 700,000 - 1,400,000; Full time

Job summary

Catalyst Brands, Bengaluru, India, is seeking a SOC Analyst L2 to join its Cybersecurity Team. You will handle escalated alerts and complex incidents beyond Tier 1, supporting containment and recovery actions.

Responsibilities include real-time monitoring, event correlation across endpoints, network, cloud and email sources, building incident timelines, and recommending detection improvements. Strong communication and 4–6 years SOC experience required.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity.
• 4–6 years in SOC or equivalent.
• Relevant certifications (e.g., CompTIA Security+ / CEH / CCNA Security / CISSP) are a plus.

Responsibilities

• Real-time monitoring of security dashboards and SIEM networks.
• Investigate escalated incidents from Tier 1.
• Perform event correlation across multiple sources (endpoint, network, identity, cloud, email).
• Support containment, eradication, and recovery actions.
• Build incident timelines and determine scope, impact, and affected assets.
• Recommend SIEM/playbook improvements to reduce false positives.

Skills

Networking

Operating Systems

MITRE ATT&CK

SIEM

EDR

SOAR

Incident response

Data correlation

Python/PowerShell

Education

Bachelor’s degree in computer science / IT / Cybersecurity

Tools

Cribl Lake

Logscale

CrowdStrike

Microsoft Defender

Phantom

BlinkOps

Vectra

Plixer

ExtraHop

Job description

Overview

SOC Analyst in Cybersecurity Team (Analyst 2)

About Catalyst Brands:

Catalyst Brands is a leading U.S. retail company formed through the merger of JCPenney and SPARC Group. We bring together iconic names such as Aéropostale, Brooks Brothers, Lucky Brand, Nautica, and JCPenney under one powerful platform. With nearly 1,800 stores, a strong e-commerce presence, and a customer base of over 60 million, we are redefining modern retail through scale, innovation, and heritage. Backed by industry leaders, Catalyst Brands offers a dynamic environment where talent can thrive and help shape the future of fashion and retail.

Role Overview:

A SOC (Security Operations Center) L2 Analyst, also known as Tier 2 or Analyst 2, is the intermediate tier in the common three-tier SOC model for Catalyst Brands Cybersecurity Team. Their primary goal is to handle escalated alerts and confirmed or complex incidents that Tier 1 cannot fully resolve.

Primary Responsibilities:

• Real-Time Monitoring: Continuously watch security dashboards (SIEM) for potential threats across networks, endpoints, and other security consoles.
• Investigate escalated security incidents from Tier 1.
• Perform in-depth analysis and event correlation across multiple sources (endpoint/EDR/XDR, network, identity, cloud, email, SIEM logs, etc.).
• Support or lead containment, eradication, and recovery actions (e.g., isolate hosts, disable accounts, block IPs/domains).
• Perform basic malware analysis, network forensics, or endpoint forensics as needed.
• Build incident timelines, determine scope/impact/blast radius, and identify affected systems, accounts, and data.
• Recommend or implement detection improvements (SIEM rule tuning, playbook updates) and reduce false positives.
• Mentor/support Tier 1 analysts and elevate highly complex or high-impact cases to Tier 3.
• Sometimes contributes to limited proactive hunting.
• Documentation: Maintain accurate logs of all findings, Investigations, actions taken, and evidence gathered in Case management tool.
• Shift Handover: Communicate ongoing investigations and suspicious patterns to the next shift to ensure continuity 24/7.
• Constant Vigilance: Real-time surveillance of network traffic and security alerts is essential to minimize downtime and prevent data breaches.

Soft Skills Requirements

• Ability to remain calm and focused during high-pressure security events.
• Excellent written communication for documenting technical findings clearly.
• Analytical mindset with strong attention to detail.

Work Schedule (Shift Requirements)

• Willingness and ability to work nights, weekends, holidays, and rotating shifts is frequently required (especially for 24/7 SOCs).
• Flexibility for additional coverage or surge support during major incidents.
• Reliability: Punctuality and commitment to the assigned shift schedule are critical for maintaining security coverage.

Required Skills

• Technical Proficiency: Understanding of networking protocols (TCP/IP, DNS, HTTP), operating systems (Windows, Linux), and common attack patterns (MITRE ATT&CK).
• Security Tools: Familiarity with SIEM (Cribl Lake, Logscale etc), EDR (CrowdStrike, Microsoft Defender), SOAR (Phantom, BlinkOps) platforms and NDR (Vectra, Plixer, ExtraHop).
• Analytical Thinking: Ability to correlate data from multiple sources to identify anomalies and form a response hypothesis.
• Familiarity with MITRE ATT&CK, incident response frameworks, and basic scripting (Python/PowerShell).
• Ability to correlate data, exercise judgment under time pressure, and communicate clearly with other teams.

Qualifications & Experience

• Education: Bachelor’s degree in computer science, IT, or Cybersecurity.
• Experience: 4–6 years in SOC
• Good to have Key Certifications: CompTIA Security+, CEH, CCNA Security, or CISSP etc

Pay Range

INR ₹0.00 - INR ₹0.00 /Yr.