Senior L2 SOC Analyst

The Adlakha Group; Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

The Adlakha Group seeks a senior SOC professional to go beyond alert monitoring and own complex investigations, detection engineering and proactive threat hunting. You will lead shifts, mentor analysts and improve investigation quality, working across endpoint, identity, cloud and network signals.

Expertise in CrowdStrike Falcon and Falcon Fusion SOAR, plus Entra ID, Azure, AD and M365, is essential for this role in Bengaluru.

Qualifications

• 10+ years in security with at least 6 years of hands-on SOC L2/L3 investigation experience.
• Strong experience with CrowdStrike Falcon, Falcon Next-Gen SIEM/LogScale and Falcon Fusion SOAR.
• Ability to correlate endpoint, identity, cloud and network evidence during investigations.
• Strong detection engineering skills, including writing/tuning SIEM rules and reducing false positives.
• Threat hunting across identity abuse, persistence, lateral movement and living-off-the-land techniques.
• Working knowledge of Entra ID, Azure, Active Directory, M365 and MITRE ATT&CK.
• Ability to lead shifts, mentor analysts and drive investigation quality.

Responsibilities

• Own complex investigations from detection through remediation.
• Lead threat hunting across identity, cloud and network signals.
• Drive investigation quality and mentor SOC analysts.

Skills

SOC L2/L3 investigations

Threat hunting

Detection engineering

Mentoring analysts

Investigation leadership

Tools

CrowdStrike Falcon

Falcon Next-Gen SIEM/LogScale

Falcon Fusion SOAR

Entra ID

Azure

Active Directory

M365

Job description

Looking for a senior SOC professional who can go beyond alert monitoring and take ownership of complex investigations, detection engineering and proactive threat hunting.

What we need:

• 10+ years in security, with at least 6 years of hands-on SOC L2/L3 investigation experience.
• Strong experience with CrowdStrike Falcon, Falcon Next-Gen SIEM/LogScale and Falcon Fusion SOAR.
• Ability to correlate endpoint, identity, cloud and network evidence during investigations.
• Strong detection engineering skills, including writing/tuning SIEM rules and reducing false positives.
• Threat hunting across identity abuse, persistence, lateral movement and living-off-the-land techniques.
• Working knowledge of Entra ID, Azure, Active Directory, M365 and MITRE ATT&CK.
• Ability to lead shifts, mentor analysts and drive investigation quality.