Senior Security Analyst - SOC

Mobileum; Gurugram District; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Mobileum in Gurgaon, India is seeking a Senior Security Analyst to lead the Security Operations Center, drive complex investigations, and strengthen detection and incident response capabilities. The role requires 8–10 years in Security Operations, hands-on SIEM/EDR experience, MSSP exposure, threat hunting, and the ability to deliver executive reporting, dashboards, and playbooks.

You will coordinate with IT, Cloud, Network, and Application teams, and contribute to SOC maturity and automation

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related discipline.
• 8–10 years in Security Operations with minimum 4 years as L2 SOC Analyst or equivalent.
• Experience with MSSP environments, SIEM/EDR, IR, threat hunting, and detection engineering.

Responsibilities

• Lead investigation of complex security incidents escalated by MSSP and SOC analysts.
• Validate incident severity, business impact, attack scope, and response actions.
• Coordinate containment, eradication, recovery, and post-incident activities.
• Design, develop, and optimize SIEM detection use cases and detection logic.
• Perform proactive threat hunting using intelligence-driven methodologies.
• Review MSSP investigation quality, SLA adherence, and recommend improvements.
• Support onboarding of new log sources and improve SOAR playbooks.
• Prepare daily, weekly, monthly, and quarterly SOC reports, dashboards, KPIs, and CISO presentation inputs.
• Coordinate with IT Infrastructure, Cloud, Network, Identity, and Application teams until security actions are closed.
• Maintain SOC documentation, playbooks, runbooks, and technical standards.
• Drive SOC maturity, automation, and continuous improvement initiatives.

Skills

Security Operations

Incident Response

Threat Hunting

SOC Leadership

Executive Reporting

Analytical Skills

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

CrowdStrike NGSIEM

Microsoft Sentinel

Splunk

QRadar

SOAR

Azure

AWS

Job description

We are hiring for Senior Security Analyst -SOC at Gurgaon

Job Title: Senior Security Analyst Security Operations Center (SOC)
Location: Gurgaon, India (Work from Office)
Work Mode: Full-time | On-site

Flexibility to support 24x7 operational requirements, as needed

Role Overview

The Senior Security Analyst serves as the technical lead within the Security Operations Center (SOC), leading complex cyber security investigations, enhancing detection capabilities, improving incident response, coordinating with the MSSP and internal teams, and supporting the SOC Manager through executive reporting, service governance, and continuous improvement initiatives.

Core Responsibilities

• Lead investigation of complex security incidents escalated by MSSP and SOC analysts.
• Validate incident severity, business impact, attack scope, and response actions.
• Coordinate containment, eradication, recovery, and post-incident activities.
• Design, develop, and optimize SIEM detection use cases and detection logic.
• Perform proactive threat hunting using intelligence-driven methodologies.
• Review MSSP investigation quality, SLA adherence, and recommend improvements.
• Support onboarding of new log sources and improve SOAR playbooks.
• Prepare daily, weekly, monthly, and quarterly SOC reports, dashboards, KPIs, and CISO presentation inputs.
• Coordinate with IT Infrastructure, Cloud, Network, Identity, and Application teams until security actions are closed.
• Maintain SOC documentation, playbooks, runbooks, and technical standards.
• Drive SOC maturity, automation, and continuous improvement initiatives.

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related discipline.

Required Experience

• 8-10 years of Security Operations experience, with minimum 4 years as an L2 SOC Analyst or equivalent.
• Experience with MSSP environments, SIEM, EDR, Incident Response, Threat Hunting, and Detection Engineering.

Technical Skills

• SIEM: CrowdStrike NGSIEM, Microsoft Sentinel, Splunk, QRadar
• EDR: CrowdStrike Falcon, Microsoft Defender
• Cloud: Azure, Microsoft Entra ID, AWS (preferred).
• Email Security, SOAR
• Frameworks: MITRE ATT&CK, NIST CSF, ISO 27001.

Preferred Certifications

• CrowdStrike Falcon Certification.

Key Competencies

• Ownership and accountability
• Technical leadership
• Stakeholder management
• Executive reporting and presentation
• Analytical problem solving
• Communication and collaboration

Key Performance Indicators

• High-priority incident investigation within SLA.
• Improved detection coverage and reduced false positives.
• Timely executive dashboards and reporting.
• Threat hunting outcomes and SOC maturity improvements.
• MSSP service quality and action-item closure.

Work environment & availability

• Willingness to support 24x7 operations as required, including after-hours and weekend support during critical or high-severity incidents.