Security Operations Center Analyst - L2

SRM Technologies; Chennai District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

SRM Technologies is seeking a skilled SOC Analyst (L2) to provide hands-on security monitoring and incident response within a 24x7 SOC in Chennai. The role focuses on triaging alerts, rapid escalation of critical events, and maintaining high-quality incident documentation and handoffs.

The ideal candidate will have strong investigative skills across endpoint, identity, cloud, and network domains, with experience using EDR, case management tools, SQL-based analysis, and structured incident

Qualifications

• Experience in Security Operations Centers (SOC) environments.
• Strong incident investigation and response capabilities.
• Excellent documentation and stakeholder communication.

Responsibilities

• Monitor and triage 24x7 security alerts across multiple platforms.
• Perform detailed analysis of medium/low severity alerts and escalate high/critical incidents.
• Execute runbooks and playbooks for consistent incident handling.
• Maintain queue hygiene and ensure timely closure or escalation of alerts.
• Investigate endpoints, identity, cloud, email, and network events.

Job description

Security Operations (SOC) Analyst - L2 | SRM Tech | Onsite

About SRM Tech

SRM Technologies is a global digital and engineering partner delivering capabilities across data and AI, enterprise platforms, embedded and platform engineering, supply chain, and design-to-manufacturing services.

We work across high-impact industries such as Mobility, Life Sciences, Healthcare, and Logistics, supporting enterprises across North America, APAC, and Europe in building intelligent, future-ready ecosystems and driving transformation at scale.

As a Great Place to Work®-certified organization, we are committed to creating an environment where people can learn, grow, and thrive. We believe empowered individuals drive innovation, deliver value to customers, and play a meaningful role in shaping our collective success.

At SRM Tech, every contribution matters, and we are always looking for passionate individuals who are eager to shape their careers with us.

Work Mode: Chennai (24/7 Rotational shift)

Preferred Experience: 4 – 7 years

About the Role:

We are seeking a highly skilled SOC Analyst (L2) to provide hands‑on security monitoring, investigation, and incident response support within a 24x7 Security Operations Center (SOC). The primary focus of this role is to ensure continuous security queue coverage, perform effective triage of medium and low‑severity alerts, rapidly escalation high and critical security events, and maintain high‑quality incident documentation and handoffs.

The ideal candidate will have strong investigative skills across endpoint, identity, cloud, and network security domains, with practical experience using EDR platforms, case management tools, SQL‑based analysis, and structured incident response procedures.

Key Responsibilities:

Security Monitoring & Alert Triage

• Monitor and triage security alerts from multiple security platforms on a 24x7 basis.
• Perform detailed analysis of medium and low‑severity alerts and determine appropriate disposition.
• Rapidly identify, validate, and escalation high and critical severity incidents according to defined SLAs.
• Execute incident response runbooks and playbooks to ensure consistent handling of security events.
• Maintain queue hygiene and ensure timely closure or escalation of alerts.
• Conduct hands‑on investigations involving endpoint, identity, cloud, email, and network‑based security events.
• Correlate data from multiple sources to determine attack scope, impact, and root cause.
• Gather and document evidence to support incident disposition and remediation recommendations.
• Participate in containment, eradication, and recovery activities during security incidents.
• Support post‑incident reviews and lessons learned activities.

Case Management & Documentation

• Manage incidents through Tines or comparable case management and workflow platforms.
• Maintain accurate incident records, investigation notes, and evidence artifacts.
• Produce clear and actionable updates for stakeholders and escalation teams.
• Ensure high‑quality shift handovers with complete context, findings, and pending actions.

Security Analytics & Threat Investigation

• Perform log and data analysis using Databricks, SQL, and security telemetry sources.
• Investigate suspicious activity using endpoint, identity, cloud, and authentication data.
• Support threat hunting activities and identify patterns indicative of malicious behavior.
• Recommend improvements to alert logic, detection rules, and operational processes.
• Collaborate with SOC Leads, Incident Responders, Cloud Operations, and Infrastructure teams.
• Assist in refining operational runbooks, playbooks, and investigation procedures.
• Contribute to knowledge management and continuous service improvement initiatives.

Technical Skills

Security Operations & Investigation

• Security alert triage and incident investigation
• Threat detection and analysis
• Evidence collection and incident documentation
• Runbook and playbook execution

Identity & Cloud Security

• AWS and Azure security event analysis
• Authentication, privilege, and identity investigations
• Cloud security monitoring concepts

Security Analytics

• SQL‑based security analysis
• Log correlation and event investigation
• Data‑driven threat analysis

Case Management

• ServiceNow, Jira, TheHive, or equivalent incident/case management platforms

Experience with SIEM solutions such as:

Note: SIEM experience is beneficial; however, practical investigation, case management, endpoint security, and multi‑source analysis capabilities are considered more critical for this role.

Required Qualification:

• 4 to 7 years of experience in Security Operations Center (SOC) environments.
• Strong hands‑on experience with security investigations and incident response.
• Experience analyzing endpoint, identity, and cloud security events.
• Familiarity with structured case management workflows.
• Proven ability to make evidence‑based incident disposition decisions.
• Experience supporting 24x7 security operations environments.
• Strong communication, documentation, and stakeholder management skills.
• Experience with triaging Identity, public cloud (AMS, Azure, GCP) email (Proofpoint or similar), and Zscaler telemetry
• Experience with AI assisted enrichment and investigation tools
• Experience with Atlassian Suite (JIRA, Confluence)

Preferred Certifications

• Microsoft SC-200 Security Operations Analyst
• Certified Ethical Hacker (CEH)
• AWS Security Specialty
• CrowdStrike Falcon Certifications (Preferred)

SRM Tech is an equal opportunity employer committed to diversity, equity, inclusion, and belonging. We make all hiring decisions based on merit, without bias or discrimination, in line with applicable laws.