Developer

Iflow; Chennai District; On-site; INR 600,000 - 900,000; Full time

Job summary

Iflow is seeking a SOC Analyst L2 in Chennai to monitor security events and drive incident response. The role involves triage, containment, eradication, and recovery for security incidents, with a focus on reducing false positives through improved detection logic and correlation rules.

You will investigate alerts using SIEM, EDR, and threat intelligence tools, correlate events across multiple sources, and coordinate with IT and network teams for deeper investigations.

Qualifications

• 6–8 years of experience in SOC or security operations.
• Experience in security monitoring and incident response.
• Proficiency with SIEM, EDR, and threat intelligence tools.
• Ability to perform triage, containment, eradication, and recovery.
• Experience correlating events across logs from firewalls, endpoints, IAM, and cloud.
• Ability to validate true positives and reduce false positives.
• Experience leading triage for medium to high severity incidents.
• Strong documentation and reporting skills.

Responsibilities

• Perform in-depth analysis of security alerts escalated from L1
• Investigate suspicious activities using SIEM, EDR, and threat intelligence tools
• Correlate events across multiple log sources (firewalls, endpoints, IAM, cloud logs)
• Validate true positives and recommend reducing false positives
• Lead triage and response for medium to high severity incidents
• Coordinate with IT, network, and application teams during incidents and support deep investigations when required
• Conduct proactive threat hunting based on TTPs (e.g., MITRE ATT&CK)
• Fine-tuning and optimize SIEM use cases to reduce false positives
• Develop new correlation rules and detection logic
• Document incidents, findings, and response actions
• Prepare weekly , monthly reports for SOC leadership and stakeholders

Skills

SOC Analyst L2

Tools

SIEM

EDR

Threat intelligence tools

MITRE ATT&CK

Job description

Skills: SOC Analyst L2

Experience Required: 6-8

Role Descriptions:

Security Monitoring & Incident Response

Investigate and analyze security alerts escalated by L1 SOC analysts.

Perform triage, containment, eradication, and recovery activities for security incidents.

1. Perform in-depth analysis of security alerts escalated from L1
2. Investigate suspicious activities using SIEM, EDR, and threat intelligence tools
3. Correlate events across multiple log sources (firewalls, endpoints, IAM, cloud logs)
4. Validate true positives and recommend reducing false positives
5. Lead triage and response for medium to high severity incidents
6. Coordinate with IT, network, and application teams during incidents and support deep investigations when required
7. Conduct proactive threat hunting based on TTPs (e.g., MITRE ATT&CK)
8. Fine-tuning and optimize SIEM use cases to reduce false positives
9. Develop new correlation rules and detection logic
10. Document incidents, findings, and response actions
11. Prepare weekly , monthly reports for SOC leadership and stakeholders

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.