Security Information Event Management (SIEM)

Wipro; Hyderabad, Pune District, Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Wipro in Hyderabad is seeking an L3 SOC Analyst to join our Security Operations Center. The role goes beyond monitoring to include leadership, incident resolution, and threat context, shaping responses and guiding L2 teams.

You will manage SIEM operations, conduct threat hunting and threat intelligence, and coordinate with regional/global leads. Strong communication and hands-on experience with firewall and IDS are essential.

Qualifications

• 6–8 years of experience with the SIEM platform.
• Experience in security operations, incident management, intrusion detection, firewall deployment, and security event analysis.
• Experience with security device installations, configuration, and troubleshooting (e.g., firewall, IDS).
• Experience in Threat hunting and Threat Intelligence.
• Strong leadership and effective communication to collaborate with teams.

Responsibilities

• Management of SIEM solution.
• Investigate, remediate threats and alerts escalated from L2 for additional context / risk assessments.
• Escalate significant or complex threats to regional/global leads from client end.
• Identify potential root cause of Incidents and provide remediation steps for Medium and high severity incidents.
• Recommend and implement tuning enhancements to alerting rules and SOPs.
• Conduct information security investigations from security incidents identified by tier 2 analysts.
• Act as escalation point for tier 2 SOC analysts to guide incident resolution and containment techniques.
• Create SMTD documents as required.
• Perform targeted threat intel analysis to anticipate future attacks and suggest new use cases.
• Validate and notify incidents to IR/SOC leads and handle P1/P2 incidents.

Skills

SIEM

Threat hunting

Threat intelligence

Leadership

Incident management

Incident response

Tools

Firewall

IDS

ServiceNow

MDE

Job description

Job Description:-

An L3 SOC Analyst is a senior member of the Security Operations Center (SOC) team. Their role extends beyond monitoring and analysis to include leadership, technical expertise, and incident resolution. As an L3 Analyst, youll play a critical role in maintaining the organization’s security posture and ensuring effective incident response.

Roles&Responsibilities :-

• 1. Management of SIEM solution.
• 2. Investigate, remediate threats and alerts escalated from L2 for additional context / risk assessments.
• 3. Escalate significant or complex threats to regional / global leads from client end.
• 4. Identify potential root cause of Incidents, provide remediation steps for Medium, high sev incidents.
• 5. Recommend and implement tuning enhancement to defined alerting rules and SOPs
• 6. Responsible for conducting information security investigations as a result of security incidents identified by the tier 2 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, SNOW Tickets, Email and MDE),
• 7. Act as a point of escalation for tier 2 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques.
• 8. Create SMTD documents as per the requirement.
• 9. Perform targeted threat intel analysis to determine a future attack planned against org and give inputs for new use cases.
• 10. Validation and Notification of Incidents to IR/SOC lead
• 11. Ensure to take up the P1/P2 incidents and troubleshoot the same.

Experience:-6-8 years of experience with the SIEM platform

• 1. Responsible for in-depth analysis of events discovered by L2 Operators
• 2. Working within the information security field, with emphasis on security operations, incident management, intrusion detection, firewall deployment, and security event analysis
• 3. Experience with security device installations, configuration, and troubleshooting (e.g., firewall, IDS, etc.)
• 4. Experience in Threat hunting and Threat Intelligence .
• 5. Strong leadership skills to guide junior analysts and Effective communication to collaborate with other teams and stakeholders.
• 6. Analyze root causes and recommend preventive measures.
• 7. Experience in Advance SIEM Skills and Optimize and fine-tune security tool (SIEM).