L2 SOC Analyst

UST; Dadri; Vor Ort; INR 600.000 - 1.000.000; Vollzeit

Zusammenfassung

UST seeks an experienced SOC Analyst to perform full investigations of security incidents beyond initial triage. You will act as the first reviewer of SOC use cases and validate alerts across SIEM, EDR, network, firewall, email, and endpoints.

You will document findings, work within SLAs in a 24x7 SOC, and guide L1 escalations with opportunities to mentor junior staff and improve playbooks.

Qualifikationen

• Experience performing full investigations of security incidents beyond initial triage.
• Ability to act as the first reviewer of the SOC use case / queue.
• Strong skills in validating alerts and independently closing incidents when no security issue is identified.
• Hands on experience investigating logs from SIEM, EDR, network, firewall, email, and endpoint sources.
• Solid understanding of the incident response lifecycle and attacker TTPs.
• Experience working with escalations from L1 and deciding when escalation to L3 or customer is required.
• Clear documentation of investigation findings and closure rationale in ticketing systems.
• Ability to work within defined SLAs in a 24x7 SOC environment.

Aufgaben

• Investigate security incidents across SIEM, EDR, network, firewall, email, and endpoint data.
• Review SOC use cases and queues as the first line of defense.
• Validate alerts and close incidents when no threat is detected, documenting rationale.
• Escalate appropriately to L3 or customers based on findings.
• Maintain thorough documentation of investigations and closure actions in tickets.
• Operate within 24x7 SOC SLAs and contribute to incident response playbooks.

Kenntnisse

SIEM

Incident Response

Log Analysis

Security Operations

Threat Intelligence

SOC Runbooks

Email Security

Endpoint Security

Tools

Splunk

Microsoft Sentinel

EDR

Jobbeschreibung

Role Description

Job Description Must Have Skills & Experience

• Experience performing full investigations of security s, beyond initial triage
• Ability to act as the first reviewer of the SOC use case / queue
• Strong skills in validating s and independently closing s when no security issue is identified
• Hands on experience investigating logs from SIEM, EDR, network, firewall, email, and endpoint sources
• Solid understanding of the incident response lifecycle and attacker TTPs
• Experience working with escalations from L1 and deciding when escalation to L3 or customer is required
• Clear documentation of investigation findings and closure rationale in ticketing systems
• Ability to work within defined SLAs in a 24x7 SOC environment

Good to Have Skills

• Experience with SIEM platforms such as Splunk or Microsoft Sentinel
• Exposure to threat intelligence, IOC enrichment, or basic threat hunting
• Ability to suggest tuning or detection improvements based on investigation outcomes
• Experience mentoring or providing feedback to L1 analysts
• Familiarity with SOC playbooks, runbooks, and standard operating procedures

Skills

• Email Security
• Endpoint Security
• SOC Runbooks
• Incident Response
• Log Analysis
• Security Operations
• Threat Intelligence