InfoSec L1 SOC Analyst

- Zoetis India Capability Center; Hyderabad; On-site; INR 700,000 - 1,100,000; Full time

Job summary

Zoetis India Capability Center (ZICC) in Hyderabad seeks a SOC Analyst to join the Information Security Strategy & Risk Management team. You will work with onshore security teams to monitor, triage and investigate alerts across Zoetis, contributing to reliable detection and rapid response in a 24/7/365 global operation.

You will gain hands-on experience with EDR, SIEM and threat intelligence tools, support post‑incident reviews, and help update incident response playbooks.

Responsibilities

• Triage and investigate endpoint-related alerts with CrowdStrike EDR and SIEM.
• Analyze SIEM detections and endpoint telemetry to assess severity and response.
• Document false positives and anomalies to improve alert fidelity.
• Support endpoint visibility through sensor health checks and telemetry validation.
• Investigate suspicious activity using data from EDR, SIEM and threat intel.
• Collaborate with Threat Intelligence, Vulnerability Management, OT and Incident Response teams.
• Update incident response playbooks and SOPs for current tools.
• Follow escalation procedures and share knowledge within the team.
• Track alert trends and assist in reporting on detection efficacy.
• Stay informed on emerging threats and security updates.

Skills

Security Operations

Incident Triage

Threat Intelligence

Vulnerability Management

Tools

CrowdStrike EDR

SIEM

Job description

POSITION SUMMARY

Zoetis, Inc. is the world's largest producer of medicine and vaccinations for pets and livestock. The Zoetis Tech & Digital (ZTD) Global Technology Risk Management Organization is a key building block of ZTD.Join us at Zoetis India Capability Center (ZICC) in Hyderabad, where innovation meets excellence. As part of the world's leading animal healthcare company, ZICC is at the forefront of driving transformative advancements and applying technology to solve the most complex problems. Our mission is to ensure sustainable growth and maintain a competitive edge for Zoetis globally by leveraging the exceptional talent in India.At ZICC, you'll be part of a dynamic team that partners with colleagues worldwide, embodying the true spirit of One Zoetis. Together, we ensure seamless integration and collaboration, fostering an environment where your contributions can make a real impact. Be a part of our journey to pioneer innovation and drive the future of animal healthcare.The Information Security Strategy & Risk Management team at Zoetis ensures a secure strategy through a disciplined process of making colleagues security savvy, driving down residual risk, reducing the attack surface, all while enabling the business. This team is responsible for critical services that strengthen Zoetis's security posture, including protecting sensitive data, identifying and mitigating cyber threats and seamlessly integrating secure assets during organizational changes. Key functions within the team include Security Operations, Vulnerability Management, Threat Intelligence, Security Awareness, Mergers & Acquisitions Security and Operational Technology (OT) Security. Through these services, the team empowers the organization to operate securely and efficiently in a dynamic digital environment.The SOC Analyst will work closely with onshore security teams to support day-to-day monitoring, triage and investigation of alerts across Zoetis. This role plays an essential part in ensuring the reliability and responsiveness of security operations, with a focus on accurate alert handling and continuous improvement in detection and response workflows.The SOC Analyst will assist in the investigation of suspicious activity, escalation of potential incidents and documentation of response actions. This individual will gain hands‑on experience with security technologies such as EDR, SIEM and threat intelligence tools while supporting ongoing tuning efforts and participating in post‑incident reviews. Working as part of a global 24/7/365 team, the analyst will collaborate closely with peers and senior analysts to strengthen the SOC’s ability to detect, analyze and respond to cyber threats across the enterprise.

POSITION RESPONSIBILITIES

Percent of Time -100

• Partner with onshore SOC and incident response teams to triage, escalre and assist in the investigation of endpoint-related alerts using CrowdStrike EDR and SIEM.
• Analyze and interpret SIEM detections and endpoint telemetry to understand alert context, assess severity and support appropriate response actions.
• Contribute feedback on alert fidelity by documenting false positives, missed detections and behavioral anomalies encountered during investigations.
• Support efforts to improve endpoint visibility by assisting with sensor health checks, basic policy verification and telemetry validation activities.
• Participate in investigations of suspicious activity by gathering relevant data from EDR, SIEM and threat intelligence sources to aid in root cause analysis.
• Collaborate with senior analysts and cross-functional teams such as Threat Intel, Vulnerability Management, OT and Incident Response to contextualize alerts and broaden investigative scope.
• Assist in reviewing and updating incident response playbooks and SOPs to ensure alignment with current tools and team workflows.
• Follow established escalation procedures, documenting investigative steps clearly and contributing to knowledge sharing within the team.
• Help monitor the effectiveness of detections and response actions by tracking alert trends and contributing to internal metrics and reporting.
• Stay informed on emerging threats, attacker behaviors and security platform updates to continue building knowledge and improving investigation skills.

ORGANIZATIONAL RELATIONSHIPS

• Collaborates closely with onshore security teams, including Security Operations, Vulnerability Management, Threat Intelligence, Operational Technology (OT), IDAM, Cloud Security and Security Awareness.
• Works with cross-functional teams such as Infrastructure, Application Development and Cloud Engineering to ensure seamless integration and operation of security tools.
• Partners with Identity and Access Management teams to implement and maintain secure access controls.
• Engages with external vendors and service providers to evaluate and integrate third-party security solutions.
• Coordinates with internal stakeholders to align security initiatives with business obje