Security Analyst L2/L3

Wipro; Bengaluru; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Wipro is seeking an experienced SOC Analyst L2/L3 to join 24x7 Security Operations, handling advanced security monitoring, incident investigation and response, threat hunting, detection engineering, and technical escalation. The role requires hands-on CrowdStrike Falcon EDR and CrowdStrike Next-Gen SIEM proficiency and the ability to guide junior SOC analysts.

Key responsibilities include acting as the L2/L3 escalation point for high-severity incidents, performing triage, containment,

Qualifications

• Hands-on experience with CrowdStrike Falcon EDR and CrowdStrike Next-Gen SIEM.
• Ability to independently investigate complex security incidents.
• Analyse security telemetry, identify attacker behavior and guide juniors.

Responsibilities

• Act as the L2/L3 escalation point for complex and high-severity security incidents.
• Perform advanced triage, investigation, containment, and remediation of security incidents.
• Investigate malware, ransomware, phishing, credential compromise, suspicious authentication, privilege escalation, persistence, lateral movement, and suspected data exfiltration.
• Correlate endpoint, identity, network, cloud, email, and other security telemetry during investigations.
• Perform root‑cause analysis and recommend corrective and preventive actions.
• Coordinate containment, remediation, and recovery activities with infrastructure, identity, network, cloud, and security teams.
• Maintain clear incident timelines, investigation findings, evidence, and remediation recommendations.

Skills

Incident response

Threat hunting

Security monitoring

Tools

CrowdStrike Falcon EDR

CrowdStrike Next-Gen SIEM

Job description

CrowdStrike EDR & Next-Gen SIEM

We are looking for an experienced SOC Analyst L2/L3 to support 24x7 Security Operations. The role will be responsible for advanced security monitoring, incident investigation and response, threat hunting, detection engineering, and technical escalation.

The ideal candidate should have strong hands‑on experience with CrowdStrike Falcon EDR and CrowdStrike Next-Gen SIEM, with the ability to independently investigate complex security incidents, analyze security telemetry, identify attacker behavior, and guide junior SOC analysts.

Key Responsibilities

Security Monitoring & Incident Response

• Act as the L2/L3 escalation point for complex and high‑severity security incidents.
• Perform advanced triage, investigation, containment, and remediation of security incidents.
• Investigate malware, ransomware, phishing, credential compromise, suspicious authentication, privilege escalation, persistence, lateral movement, and suspected data exfiltration.
• Correlate endpoint, identity, network, cloud, email, and other security telemetry during investigations.
• Perform root‑cause analysis and recommend corrective and preventive actions.
• Coordinate containment, remediation, and recovery activities with infrastructure, identity, network, cloud, and security teams.
• Maintain clear incident timelines, investigation findings, evidence, and remediation recommendations.

CrowdStrike Certification Requirement

• Relevant CrowdStrike certification is preferred at the time of joining.
• Candidates who are not CrowdStrike certified must be willing to obtain the applicable CrowdStrike Next-Gen SIEM certification within 3 months of joining.
• Candidates are expected to maintain hands‑on proficiency with CrowdStrike Falcon EDR and CrowdStrike Next-Gen SIEM as part of the L2/L3 SOC role.