Senior Soc Analyst

Solverminds Solutions And Technologies; Chennai Metropolitan Area; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Solverminds Solutions And Technologies seeks a seasoned SOC professional to own the operating model, detections, response playbooks and escalation paths. You will lead end-to-end incident response, conduct post-incident RCA and map activities to MITRE ATT&CK.

You will design and tune detections across SIEM for client SaaS and corporate/cloud environments. The role requires 3-5 years in SOC, strong SIEM engineering skills, and multi-cloud security expertise (Azure, AWS, GCP, OCI, M365).

Qualifications

• 3-5 years in SOC / security operations including hands-on IR leadership.
• Strong SIEM engineering and detection use-case design.
• Deep understanding of MITRE ATT&CK and incident lifecycle.
• Multi-cloud security knowledge (Azure, AWS, GCP, OCI) and M365 threats.
• Experience with EDR, firewall and vulnerability-management tooling.
• Excellent communication and stakeholder management.

Responsibilities

• Own SOC operating model, detection coverage and playbooks.
• Lead end-to-end incident response and post-incident RCA.
• Design, build and tune SIEM detections across environments.
• Run proactive threat hunting across cloud, endpoint, identity, network.
• Coordinate vulnerability management with Infra/DevOps; close findings.
• Interface with client security teams and support security questionnaires.
• Report posture and KPIs to leadership.
• Mentor SOC Analysts and build runbooks and knowledge base.
• Drive automation / SOAR to reduce MTTD/MTTR.
• Integrate with 24/7 support and IT Infrastructure.

Skills

SOC operations

Incident response

Threat detection

MITRE ATT&CK

Multi-cloud security

EDR

Vulnerability management

Communication

Stakeholder management

Education

Bachelor's degree or equivalent

Tools

Sentinel

Splunk

QRadar

Elastic

KQL

SPL

Job description

Role & responsibilities

• Own the SOC operating model detection coverage, response playbooks, escalation paths and shift structure.


• Lead incident response end-to-end: detection, containment, eradication, recovery and post-incident RCA, mapped to MITRE ATT&CK.


• Design, build and tune detections and use-cases in the SIEM across client SaaS instances and the corporate/M365 environment.


• Run proactive threat hunting across cloud, endpoint, identity and network telemetry.


• Own the multi-cloud security-monitoring posture (Defender for Cloud / Sentinel, AWS GuardDuty / Security Hub, GCP SCC, OCI Cloud Guard).


• Coordinate vulnerability management and remediation tracking with Infrastructure and DevOps, and oversee closure of penetration-test findings.


• Interface with client security teams and support customer security questionnaires and assurance for the SaaS.


• Report security posture, incidents and SOC KPIs to leadership.


• Mentor and quality-assure the SOC Analyst; build runbooks and the SOC knowledge base.


• Drive automation / SOAR to reduce mean time to detect and respond (MTTD / MTTR).


• The pod integrates with the 247 support model and works closely with IT Infrastructure, DevOps/cloud and delivery.

Preferred candidate profile

• 3-5 years in SOC / security operations, incident response or threat detection, including hands‑on IR leadership.


• Strong SIEM engineering (Sentinel, Splunk, QRadar or Elastic), detection use‑case design and query languages (KQL, SPL).


• Deep understanding of MITRE ATT&CK, the incident lifecycle and forensic fundamentals.


• Solid multi-cloud security knowledge (Azure, AWS, GCP, OCI) and M365 / Entra ID identity threats, including AiTM / phishing.


• Experience with EDR, firewall and vulnerability-management tooling.


• Strong communication and stakeholder management able to brief leadership and clients.


• Bachelor's degree or equivalent work experience.