Associate, Security Operations Centre

MassMutual; Hyderabad; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

MassMutual India seeks a Senior SOC Analyst to join its Cyber Fusion Center. You will monitor and investigate alerts across endpoints, networks, cloud, and identities, and lead complex investigations to determine scope, attack path, and root cause.

You will develop detection logic, dashboards, playbooks, and mentor analysts, collaborating with cross-functional teams to strengthen controls. Hybrid work arrangements apply.

Qualifications

• 5–8 years of progressive experience in security operations, incident response, threat detection, threat hunting, digital forensics, or related discipline.
• Hands-on experience with an enterprise SIEM and EDR/XDR platform, including advanced querying, investigation, and alert tuning.
• Strong understanding of Windows and Linux internals, networking, authentication, Active Directory or modern identity platforms, and attacker techniques.
• Experience investigating threats across on-premises and cloud environments, including at least one major cloud platform.
• Knowledge of phishing, credential abuse, malware, ransomware, lateral movement, persistence, data exfiltration, and insider-risk scenarios.
• Automation or scripting using Python, PowerShell, SQL, KQL, SPL.
• Strong written and verbal communication skills, including the ability to explain technical risk and business impact clearly.

Responsibilities

• Monitor and investigate alerts across enterprise endpoints, networks, identity systems, apps, cloud platforms, and SaaS services.
• Lead complex investigations by correlating SIEM, EDR/XDR, network, cloud, identity, and threat-intelligence telemetry.
• Determine scope, impact, attack path, and root cause; recommend containment, eradication, and recovery actions.
• Serve as an escalation point for analysts; ensure high-quality case documentation and shift handoffs.
• Conduct proactive threat hunting using hypotheses, behavioral analytics, threat intelligence, and the MITRE ATT&CK framework.
• Develop and tune detection logic, correlation rules, dashboards, and response playbooks.
• Identify opportunities for SOAR and agentic automation to improve response speed and analyst efficiency.
• Support malware triage and analysis; extract and operationalize indicators of compromise and attacker behaviors.
• Prepare concise incident updates, investigation reports, lessons learned, and metrics for stakeholders.
• Partner with detection engineering, incident response, forensics, vulnerability management, and cloud security teams to address control gaps.

Skills

Security operations

Threat detection

Threat hunting

Incident response

Digital forensics

Threat intelligence

Python

PowerShell

SQL

KQL

SPL

Communication

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM platform

EDR/XDR

Cloud security tooling

Job description

Who We Are – MassMutual India

Since 1851, MassMutual’s commitment has always been to help people protect their families, support their communities, and help one another. Therefore, we want to inspire people to Live Mutual. We at MassMutual value diversity and inclusion. We’re people helping people A career with us means you will work alongside exceptional people and be empowered to reach your professional and personal goals. Our employees are the foundation of what makes MassMutual a strong, stable, and ethical business. We seek and value unique and varied perspectives and experiences because we believe we are stronger when all voices are heard. We invite you to bring your bright, innovative ideas to MassMutual as we continue to help millions of Americans rely on each other. Together, we’re stronger.

Job Description

Associate Security Operations Center (SOC) Enterprise Cyber Security | MassMutual | 5–8 Years of Experience

About MassMutual Massachusetts Mutual Life Insurance Company (MassMutual) is a leading mutual life insurance company operated for the benefit of its members and participating policyowners. We help people secure their futures and protect the ones they love through a broad portfolio of insurance, retirement, and financial solutions.

The Opportunity

As a Senior SOC Analyst, you will join MassMutual’s Cyber Fusion Center and help protect the company’s data, systems, employees, customers, and policyowners. You will work with security analysts, engineers, Threat Intelligence, Offensive Security, Security Platforms, Network Security, Endpoint Security, and Identity and Access Management teams to detect, investigate, contain, and communicate cyber threats. Monitor and investigate alerts across enterprise endpoints, networks, identity systems, email, applications, cloud platforms, and SaaS services. Lead complex investigations by correlating SIEM, EDR/XDR, network, cloud, identity, and threat‑intelligence telemetry. Determine scope, impact, attack path, and root cause; recommend and coordinate containment, eradication, and recovery actions. Serve as an escalation point for analysts, provide technical guidance, and ensure high‑quality case documentation and shift handoffs. Conduct proactive threat hunting using hypotheses, behavioral analytics, threat intelligence, and the MITRE ATT&CK framework. Develop and tune detection logic, correlation rules, dashboards, and response playbooks to improve coverage and reduce false positives. Identify opportunities for SOAR and agentic automation that improve response speed, consistency, and analyst efficiency. Support malware triage and analysis; extract and operationalize indicators of compromise and attacker behaviors. Prepare concise incident updates, investigation reports, lessons learned, and metrics for technical and leadership stakeholders. Partner with detection engineering, incident response, forensics, vulnerability management, cloud security, and infrastructure teams to address control gaps.

Minimum Qualifications

• 5–8 years of progressive experience in security operations, incident response, threat detection, threat hunting, digital forensics, or a closely related discipline.
• Hands‑on experience with an enterprise SIEM and EDR/XDR platform, including advanced querying, investigation, and alert tuning.
• Strong understanding of Windows and Linux internals, networking, authentication, Active Directory or modern identity platforms, and common attacker techniques.
• Experience investigating threats across on‑premises and cloud environments, including at least one major cloud platform.
• Working knowledge of phishing, credential abuse, malware, ransomware, lateral movement, persistence, data exfiltration, and insider‑risk scenarios.
• Ability to analyze logs, endpoint telemetry, network traffic, and threat intelligence and convert findings into defensible response decisions.
• Automation or scripting capability using Python, PowerShell, SQL, KQL, SPL, or a comparable query language.
• Strong written and verbal communication skills, including the ability to explain technical risk and business impact clearly.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.

Preferred Qualifications

• Experience with SOAR playbook development, detection‑as‑code, security data engineering, or applied AI/agentic capabilities in SOC workflows.
• Experience in a large, regulated, global enterprise or financial‑services environment.
• Knowledge of NIST incident‑response practices, cyber kill chain concepts, and MITRE ATT&CK mapping.
• Relevant certifications such as CISSP, GIAC, SC‑200, CompTIA CySA+, or equivalent technical credentials.
• Experience mentoring analysts, improving operational procedures, and contributing to purple‑team or detection‑validation exercises.

What Success Looks Like

• High‑quality, timely investigations with clear evidence, risk assessment, and recommended actions.
• Reduced alert noise and measurable improvement in detection coverage, response time, and playbook effectiveness.
• Consistent collaboration and communication across global SOC shifts and partner teams.
• Actionable lessons learned that strengthen controls and reduce repeat incidents.

Core Competencies

• Accountability
• agility
• continuous learning
• communication excellence
• resilience
• self‑awareness
• sound judgment
• and the courage to act in difficult situations.

Work Expectations

The SOC supports continuous global monitoring and response through a follow‑the‑sun operating model. The successful candidate must be able to participate in scheduled shift coverage, on‑call support, and critical‑incident response as required. Specific location, work arrangement, and shift schedule will be confirmed by the hiring team.

Why Join Us?

We’ve been around since 1851. During our history, we’ve learned a few things about making sure our customers our top priority. In order to meet and exceed their expectations, we must have the best people providing the best thinking, products, and services. To accomplish this, we celebrate an inclusive, vibrant, and diverse culture that encourages growth, openness, and opportunities for everyone. A career with MassMutual, Great Place to Work certified and India’s Best Workplaces in BFSI 2023 - Top 50 organization means you will be part of a strong, stable, and ethical business with industry leading pay and benefits. And your voice will always be heard. Does this sound like a great fit? At MassMutual, we value both the flexibility that a remote work environment offers and the value that comes from connecting and collaborating in person with our colleagues. Our work environment is one where the majority of our team members adopt a hybrid schedule — working some days in the office and some days remotely, balancing flexibility with in‑person collaboration. One where each manager works with their teams to determine a schedule that meets the needs of customers, the team and the business. While the majority of our employees will follow this hybrid model, some of our roles will continue to be 100% on‑site and others may be 100% remote, subject to business needs. MassMutual is guided by a single purpose: We help people secure their future and protect the ones they love. As a company, owned by our policyowners, we are defined by mutuality and our vision to put customers first. It’s more than our company structure – it’s our way of life. We are a company of people protecting people. Our company exists because people are willing to share risk and resources, and rely on each other when it counts. At MassMutual, we Live Mutual.

If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.