Senior SOC Analyst

Yokogawa; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Yokogawa seeks a self-driven SOC Analyst (L2) in Bengaluru to own investigations end-to-end, hunt threats proactively, and strengthen our defences using modern SIEM and XDR solutions. You will analyze threats, refine detections, and contribute to incident readiness across cloud and on-prem environments.

The role requires 3–5 years in SOC operations with hands-on incident response and threat hunting, plus strong knowledge of XSIAM, Defender, Cortex XDR, and related tools.

Qualifications

• 3–5 years of hands-on experience in SOC operations, incident response, or threat hunting.
• Strong expertise in SIEM/XDR solutions (XSIAM, Microsoft Defender suite, Cortex XDR, or equivalent).
• Practical knowledge of query languages: KQL (Microsoft) and XQL (Palo Alto XSIAM / Cortex XDR).
• Experience handling alerts across firewalls, AD/Identity, XDR/EDR, email security, proxies, and cloud platforms.
• Strong understanding of the incident response lifecycle, attacker TTPs, and malware analysis.

Responsibilities

• Take end-to-end ownership of incident detection, investigation, containment, and remediation.
• Perform proactive threat hunting to uncover potential compromises or adversary activity.
• Analyse and fine-tune use cases in Next-Gen SIEM platforms (Palo Alto XSIAM).
• Utilize XDR platforms for advanced endpoint and cloud investigations.
• Monitor and handle alerts from firewalls, AD/Identity, XDR/EDR, email security, proxies, and cloud tools.
• Understand SOAR platforms and provide input to build automated response playbooks.
• Contribute to improvements to SOC processes, detections, and automation.
• Stay updated on MITRE ATT&CK, threat intelligence, and evolving attacker TTPs.
• Collaborate with cross-functional teams to strengthen incident readiness and detection coverage.

Skills

Threat hunting

SIEM/XDR

Incident response

MITRE ATT&CK

Threat intelligence

Automation/Runbooks

Tools

XSIAM

Microsoft Defender

Cortex XDR

Job description

Job Description:

Not just a job, but a career

Yokogawa, award winner for ‘Best Asset Monitoring Technology’ and ‘Best Digital Twin Technology’ at the HP Awards, is a leading provider of industrial automation, test and measurement, information systems and industrial services in several industries.

Our aim is to shape a better future for our planet through supporting the energy transition, (bio)technology, artificial intelligence, industrial cybersecurity, etc. We are committed to the United Nations sustainable development goals by utilizing our ability to measure and connect.

About the Team

Our 18,000 employees work in over 60 countries with one corporate mission, to "co-innovate tomorrow". We are looking for dynamic colleagues who share our passion for technology and care for our planet. In return, we offer you great career opportunities to grow yourself in a truly global culture where respect, value creation, collaboration, integrity, and gratitude are highly valued and exhibited in everything we do.

Role Summary

We are seeking a self-driven SOC Analyst (L2) who can take initiative, own investigations end-to-end, and actively contribute to improving our security posture. This role goes beyond monitoring — we want someone who will bring new ideas, hunt threats proactively, and strengthen our defences using modern SIEM and XDR solutions. An L2 Security Threat Intelligence and Hunting Analyst is a seasoned subject matter expert, responsible for analyzing and detecting cyber threats and malware impacting the company. This role plays a key role in gathering, analyzing and synthesizing information about current and potential threats to inform the organization’s security strategy.

Key Responsibilities

• Take end-to-end ownership of incident detection, investigation, containment, and remediation.
• Perform proactive threat hunting to uncover potential compromises or adversary activity.
• Analyse and fine-tune use cases in Next-Gen SIEM platforms (Palo Alto XSIAM).
• Utilize XDR platforms (Microsoft Defender suite, Palo Alto Cortex XDR, etc.) for advanced endpoint and cloud investigations.
• Monitor and handle alerts from:
  • Firewalls / NGFWs (Palo Alto, Fortinet, Cisco, etc.)
  • Active Directory / Identity platforms (On-premises AD, Azure AD / Entra ID, etc.)
  • EDR/XDR solutions (Microsoft Defender, Cortex XDR, etc.)
  • Email Security (Microsoft Defender for Office 365 preferred)
  • Web Proxies / SWG (Zscaler ZIA, Cisco Umbrella, etc.)
  • Cloud Security tools (Azure Security Center, Prisma Cloud, etc.)
• Understand SOAR platforms (preferably Cortex XSOAR) and provide input to platform engineers to build and improve automated response playbooks and workflows.
• Contribute ideas and implement improvements to SOC processes, detections, and automation.
• Stay updated on MITRE ATT&CK, threat intelligence, and evolving attacker TTPs.
• Collaborate with cross-functional teams to strengthen incident readiness and detection coverage.
• Reads reports, makes risk assessments, works to detect the source of attacks and tests current defenses against threats.
• Monitors security alerts and maintains awareness of new threats and vulnerabilities in order to identify potential risks.
• Conducts proactive investigations into potential threats by collecting data from multiple sources and analyzing it to identify patterns or other significant pieces of information that indicate a specific threat may be occurring or has occurred previously.
• Proficiency in threat hunting methodologies, including familiarity with tools and techniques for proactive detection of threats.

Working Conditions

• Willingness to work in rotational shifts, including weekends and public holidays

Required Qualifications

• 3-5 years of hands-on experience in SOC operations, incident response, or threat hunting.
• Strong expertise in SIEM/XDR solutions (XSIAM, Microsoft Defender suite, Cortex XDR, or equivalent).
• Practical knowledge of query languages:
  • KQL (Microsoft)
  • XQL (Palo Alto XSIAM / Cortex XDR)
• Experience handling alerts across firewalls, AD/Identity, XDR/EDR, email security, proxies, and cloud platforms.
• Strong understanding of the incident response lifecycle, attacker TTPs, and malware analysis.

Preferred / Nice-to-Have

• Certifications: CEH, CompTIA Security+, Microsoft Security certs, Palo Alto certs, or equivalent (good to have, not mandatory).
• Familiarity with multi-cloud security monitoring (Azure, AWS, GCP).
• Shell/Python scripting for automation and data analysis (good to have, not mandatory).
• Experience designing or refining SOC playbooks, runbooks, and automation workflows.

Why Join Us?

• Work hands-on with cutting-edge Next-Gen SIEM, XDR, and other security tools.
• Be empowered to drive improvements and shape the SOC’s future.
• A culture that values initiative, ownership, and innovation in security operations.

Yokogawa is an Equal Opportunity Employer. Yokogawa wants a diverse, equitable and inclusive culture.We will actively recruit, develop, and promote people from a variety of backgrounds who differ in terms of experience, knowledge, thinking styles, perspective, cultural background, and socioeconomic status.We will not discriminate based on race, skin color, age, sex, gender identity and expression, sexual orientation, religion, belief, political opinion, nationality, ethnicity, place of origin, disability, family relations or any other circumstances. Yokogawa values differences and enables everyone to belong, contribute, succeed, and demonstrate their full potential.