Senior Soc Analyst L2/L3

Kryptos Technologies Pvt Ltd.; Chennai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Kryptos Technologies Pvt Ltd. in Chennai is seeking a Senior SOC Analyst to monitor, analyze and respond to security incidents using SIEM platforms. You will work with EDR tools, cloud security, and IAM to protect enterprise systems.

The role requires 3–5+ years in a SOC, strong SIEM experience (Sentinel/Splunk/QRadar), and solid network fundamentals. This is a full-time on-site position with opportunities to grow in a security-focused environment.

Qualifications

• 3 to 5+ years of experience in a Security Operations Center (SOC).
• Hands-on experience with SIEM platforms (Sentinel, Splunk, QRadar).
• Familiarity with EDR, IDS/IPS, and cloud security platforms.

Responsibilities

• Monitor, analyze, and investigate security alerts and incidents using SIEM.
• Perform continuous security event monitoring, log analysis, and threat detection.
• Identify, triage, escalations, and respond to cybersecurity incidents.
• Conduct root cause analysis and support incident remediation activities.
• Work with security tools such as EDR, IDS/IPS, firewalls, and endpoint security solutions, email security solutions, DLP, cloud platforms like Azure, AWS or GCP and IAM.
• Analyze network traffic and system logs to identify suspicious activities.
• Collaborate with IT and security teams to resolve security vulnerabilities.
• Create and maintain incident reports, documentation, and SOPs.
• Stay updated with the latest cyber threats, attack techniques, and security best practices.
• Support vulnerability management and compliance activities when required.

Skills

Security operations

Incident response

Log analysis

Threat detection

Networking fundamentals

Tools

Sentinel

Splunk

QRadar

Microsoft Defender

CrowdStrike

Trend Micro

Job description

Role & responsibilities

Job Description

Role: Senior SOC Analyst

Location: Chennai, India

Experience: 46 Years

Employment Type: Full-Time

Key Skills: Hands-on experience with Sentinel/ Splunk/ QRadar SIEM.

Job Description

Monitor, analyze, and investigate security alerts and incidents using SIEM. Perform continuous security event monitoring, log analysis, and threat detection. Identify, triage, escalations, and respond to cybersecurity incidents. Conduct root cause analysis and support incident remediation activities. Work with security tools such as EDR (TrendMicro, CrowdStrike etc), IDS/IPS, firewalls, and endpoint security solutions, email security solutions, DLP, cloud platforms like Azure, AWS or GCP and understanding of IAM. Analyze network traffic and system logs to identify suspicious activities. Collaborate with IT and security teams to resolve security vulnerabilities. Create and maintain incident reports, documentation, and SOPs. Stay updated with the latest cyber threats, attack techniques, and security best practices. Support vulnerability management and compliance activities when required. Required Skills 3 to 5 or more years of experience in a Security Operations Center (SOC). Strong hands-on experience with sentinel or Splunk for monitoring, searching, and dashboard creation. Knowledge of SIEM concepts, log management, and threat detection. Good understanding of TCP/IP, DNS, HTTP, Windows/Linux operating systems, and networking. Familiarity with MITRE ATT&CK, Cyber Kill Chain, and incident response processes. Experience with security technologies such as Microsoft Defender, CrowdStrike, Sentinel, QRadar or similar tools is an advantage.