Level 3 SOC Analyst

Analog Devices, Inc.; Bengaluru; On-site; INR 2,000,000 - 4,200,000; Full time

Job summary

Analog Devices, Inc. is seeking a senior L3 SOC Analyst to serve as the primary technical escalation point in the Security Operations Centre.

The role leads complex cyber investigations, directs incident response, mentors L1/L2 analysts, and drives improvements in detection and response capabilities across tight SLAs. You will coordinate across Cybersecurity, IT, Legal, HR and other stakeholders while performing threat hunting and intelligence tasks.

Qualifications

• 5+ years of experience in SOC Operations, Incident Response, Threat Intelligence, Digital Forensics, Detection Engineering, or related cybersecurity disciplines.
• Advanced understanding of cyber attack methodologies, adversary behaviour, and incident response frameworks.
• Strong experience with SIEM, EDR, NDR, email security, identity security, and cloud security platforms.
• Experience leading complex investigations and coordinating response activities across multiple teams.
• Strong analytical, investigative, and decision‑making skills.
• Excellent written and verbal communication skills with the ability to communicate with both technical and executive audiences.
• Ability to operate independently in high‑pressure situations and make risk‑based decisions.

Responsibilities

• Act as the primary technical escalation point for high-severity and complex cyber incidents.
• Lead investigations involving ransomware, business email compromise, insider threats, cloud compromise, identity attacks, and advanced persistent threats.
• Perform detailed scoping, root-cause analysis, containment, eradication, and recovery activities during active incidents.
• Provide incident command support and coordinate response activities across Cybersecurity, IT, Legal, HR, Privacy, and business stakeholders.
• Conduct proactive threat hunting using intelligence, behavioural analytics, SIEM, EDR, NDR, identity, and cloud telemetry.
• Collect, analyse, operationalise, and disseminate cyber threat intelligence from internal and external sources.
• Track threat actor tactics, techniques, and procedures (TTPs) and map activity to MITRE ATT&CK.
• Develop, tune, and improve detection use cases, correlation rules, analytics, and automated response workflows.
• Own and maintain SOC playbooks, incident response procedures, escalation criteria, and communication templates.
• Provide coaching, mentorship, and quality oversight for L1 and L2 analysts.
• Review alert triage quality, escalation decisions, documentation standards, and investigation outcomes.
• Produce executive-ready incident summaries, threat assessments, lessons learned, and risk-based recommendations.
• Drive continuous improvement activities including post-incident reviews, threat modelling, detection coverage reviews, and operational readiness exercises.
• Support compliance, audit, and regulatory activities including NIST CSF, CMMC, TISAX, and incident response evidence requirements.
• Maintain flexibility to support global cybersecurity operations, including participation in management meetings, vendor engagements, support calls, incident response activities, and after-hours escalations across multiple time zones as needed.

Skills

SOC Operations

Incident Response

Threat Intelligence

Digital Forensics

Detection Engineering

Leadership

Tools

SIEM

EDR

NDR

Cloud Security

Microsoft Defender

Job description

About Analog Devices

Analog Devices, Inc. (NASDAQ: ADI) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, AI, and software technologies into solutions that combat climate change, reliably connect humans and the world, and help drive advancements in automation and robotics, mobility, healthcare, energy and data centers. With revenue of more than $11 billion in FY25, ADI ensures today's innovators stay Ahead of What's Possible. Learn more at www.analog.com and on LinkedIn and X.

L3 SOC Analyst Role Overview

The L3 SOC Analyst is the senior technical escalation point within the Security Operations Centre (SOC). This role is responsible for leading complex cyber investigations, directing incident response activities, providing threat intelligence expertise, mentoring L1/L2 analysts, and driving continuous improvement of detection and response capabilities. The role combines advanced technical investigation, threat hunting, cyber threat intelligence, incident command, and operational leadership.

Key Responsibilities

• Act as the primary technical escalation point for high-severity and complex cyber incidents.


• Lead investigations involving ransomware, business email compromise, insider threats, cloud compromise, identity attacks, and advanced persistent threats.


• Perform detailed scoping, root-cause analysis, containment, eradication, and recovery activities during active incidents.


• Provide incident command support and coordinate response activities across Cybersecurity, IT, Legal, HR, Privacy, and business stakeholders.


• Conduct proactive threat hunting using intelligence, behavioural analytics, SIEM, EDR, NDR, identity, and cloud telemetry.


• Collect, analyse, operationalise, and disseminate cyber threat intelligence from internal and external sources.


• Track threat actor tactics, techniques, and procedures (TTPs) and map activity to MITRE ATT&CK.


• Develop, tune, and improve detection use cases, correlation rules, analytics, and automated response workflows.


• Own and maintain SOC playbooks, incident response procedures, escalation criteria, and communication templates.


• Provide coaching, mentorship, and quality oversight for L1 and L2 analysts.


• Review alert triage quality, escalation decisions, documentation standards, and investigation outcomes.


• Produce executive-ready incident summaries, threat assessments, lessons learned, and risk-based recommendations.


• Drive continuous improvement activities including post-incident reviews, threat modelling, detection coverage reviews, and operational readiness exercises.


• Support compliance, audit, and regulatory activities including NIST CSF, CMMC, TISAX, and incident response evidence requirements.


• Maintain flexibility to support global cybersecurity operations, including participation in management meetings, vendor engagements, support calls, incident response activities, and after-hours escalations across multiple time zones as needed.

Required Qualifications

• 5+ years of experience in SOC Operations, Incident Response, Threat Intelligence, Digital Forensics, Detection Engineering, or related cybersecurity disciplines.


• Advanced understanding of cyber attack methodologies, adversary behaviour, and incident response frameworks.


• Strong experience with SIEM, EDR, NDR, email security, identity security, and cloud security platforms.


• Experience leading complex investigations and coordinating response activities across multiple teams.


• Strong analytical, investigative, and decision‑making skills.


• Excellent written and verbal communication skills with the ability to communicate with both technical and executive audiences.


• Ability to operate independently in high‑pressure situations and make risk‑based decisions.

Preferred Qualifications

• GCIH, GCIA, GCTI, CISSP, GCFA, GREM, CEH or equivalent certifications.


• Experience with Microsoft Defender, WIZ, SIEM/SOAR platforms, and cloud-native security tools.


• Experience within a global enterprise SOC or regulated environment.


• Experience leveraging AI, generative AI, and agentic security capabilities to enhance threat detection, investigation, response, and SOC operational efficiency.


• Scripting and automation experience using Python, PowerShell, or similar languages.

Export Licensing

For positions requiring access to technical data, Analog Devices, Inc. may have to obtain export licensing approval from the U.S. Department of Commerce - Bureau of Industry and Security and/or the U.S. Department of State - Directorate of Defense Trade Controls. As such, applicants for this position - except US Citizens, US Permanent Residents, and protected individuals as defined by 8 U.S.C. 1324b(a)(3) - may have to go through an export licensing review process.

Equal Opportunity

Analog Devices is an equal opportunity employer. We foster a culture where everyone has an opportunity to succeed regardless of their race, color, religion, age, ancestry, national origin, social or ethnic origin, sex, sexual orientation, gender, gender identity, gender expression, marital status, pregnancy, parental status, disability, medical condition, genetic information, military or veteran status, union membership, and political affiliation, or any other legally protected group.

Job Requirements

Job Req Type: Experienced Required Travel: Yes, 10% of the time Shift Type: 1st Shift/Days

Company Culture

Come join ADI - a place where Innovation meets Impact. For more than 55 years, Analog Devices has been inventing new breakthrough technologies that transform lives. At ADI you will work alongside the brightest minds to collaborate on solving complex problems that matter from autonomous vehicles, drones and factories to augmented reality and remote healthcare. ADI fosters a culture that focuses on employees through beneficial programs, aligned goals, continuous learning opportunities, and practices that create a more sustainable future.