MSS | Level 2 SOC Engineer

Cerebra; Pune District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Cerebra is hiring a Level 2 SOC Engineer in Pune to investigate and resolve security incidents, perform advanced threat analysis, tune SIEM detections, and enhance incident-response capabilities. The role collaborates with L1 and L3 teams to strengthen security posture.

Responsibilities include incident investigations, containment, malware triage, log analysis, and updating detection rules. You will also help develop playbooks and prepare security metrics, with an emphasis on reducing MTTD/MTTR.

Responsibilities

• Perform detailed security incident investigations.
• Analyze incident scope, business impact, attacker TTPs, and root cause.
• Lead containment, eradication, and recovery activities.
• Perform malware-analysis triage using static and dynamic indicators.
• Conduct endpoint triage and log analysis across multiple platforms.
• Validate IOCs using threat-intelligence sources.
• Update blocklists and security controls based on intelligence.
• Guide L1 analysts on triage, enrichment, and escalation decisions.
• Tune SIEM detection rules to reduce noise and improve fidelity.
• Add contextual enrichment to security detections.
• Develop and maintain incident-response playbooks/runbooks.
• Document lessons learned and compensating controls.
• Validate new log sources, parsing, and correlation content.
• Support SOC dashboards and operational reporting.
• Ensure incident documentation meets audit and evidence requirements.
• Support post-incident reviews.
• Participate in tabletop exercises.
• Prepare IR reporting and security metrics.
• Support improvements in MTTD and MTTR.

Job description

Immediate /Short Notice Only - Cerebra Payroll - MNC Client

MSS | Level 2 SOC Engineer

Location: Pune
Experience: 8 to 10 Years

Role Overview

We are looking for a Level 2 SOC Engineer to investigate and resolve security incidents, perform advanced threat analysis, tune SIEM detections, and improve incident-response capabilities. The engineer will work closely with L1 SOC analysts and L3 security teams.

Key Responsibilities

Security Operations & Monitoring

• Perform detailed security incident investigations.
• Analyze incident scope, business impact, attacker TTPs, and root cause.
• Lead containment, eradication, and recovery activities.
• Perform malware-analysis triage using static and dynamic indicators.
• Conduct endpoint triage and log analysis across multiple platforms.
• Validate IOCs using threat-intelligence sources.
• Update blocklists and security controls based on intelligence.
• Guide L1 analysts on triage, enrichment, and escalation decisions.

Security Engineering & Detection

• Tune SIEM detection rules to reduce noise and improve fidelity.
• Add contextual enrichment to security detections.
• Develop and maintain incident-response playbooks/runbooks.
• Document lessons learned and compensating controls.
• Validate new log sources, parsing, and correlation content.
• Support SOC dashboards and operational reporting.

Risk, Governance & Compliance

• Ensure incident documentation meets audit and evidence requirements.
• Support post-incident reviews.
• Participate in tabletop exercises.
• Prepare IR reporting and security metrics.
• Support improvements in MTTD and MTTR.