Senior Specialist, SOC Analyst

BNY; Pune District; On-site; INR 1,500,000 - 2,600,000; Full time

Job summary

BNY seeks a Senior Specialist-SOC Analyst in Pune, India to lead triage, investigations, and incident response within the Security Operations Center. You will correlate events across SIEM/EDR/IDS, tune detections, and develop playbooks while mentoring junior staff.

The role focuses on threat hunting, reporting, and collaboration with Threat Intelligence and Engineering to improve security controls. Weekend coverage may be required.

Qualifications

• 5+ years in SOC, IR, or threat detection (Tier 2).
• Experience with MITRE ATT&CK and detection tuning.
• Strong documentation and communication skills.
• Willingness to cover shifts including weekends/holidays.
• Experience with case management tools like ServiceNow.

Responsibilities

• Lead triage and investigation of security alerts and coordinate incident response.
• Conduct root cause analysis and drive containment and recovery.
• Correlate events across SIEM/EDR/IDS to identify true positives.
• Develop SOC playbooks, runbooks, and detection logic aligned to MITRE ATT&CK.
• Mentor junior analysts and provide guidance on investigation techniques and documentation.
• Prepare incident reports and executive summaries; contribute to metrics and trend analysis.
• Support purple team exercises and post-incident reviews to capture lessons learned.
• Ensure audit-ready documentation and regulatory policy adherence.
• Collaborate with engineering to tune detections and strengthen preventive controls.

Skills

Analytical skills

Problem-solving

Stakeholder management

Executive reporting

Scripting/automation (Python, Power|SH

Education

GCIH

GCIA

GCFA

GNFA

CISSP

CCSP

Tools

Splunk

Sentinel

QRadar

CrowdStrike

Microsoft Defender for Endpoint

SOAR platforms

ServiceNow

Threat Intelligence platforms

Malware analysis tools

Job description

We re seeking a future team member for the role of Senior Specialist-SOC Analyst to join our Security Operations center team. This role is located in Pune, India

In this role, you ll make an impact in the following ways:

• Lead triage and investigation of security alerts, escalating and coordinating incident response as needed.
• Perform root cause analysis, scope affected assets, and drive containment, eradication, and recovery.
• Correlate events across SIEM, EDR, IDS/IPS, firewalls, cloud logs, and identity platforms to identify true positives and reduce false positives.
• Develop, refine, and maintain SOC playbooks, runbooks, and detection logic aligned to the MITRE ATT&CK framework.
• Mentor junior analysts and provide guidance on investigation techniques, documentation standards, and operational best practices.
• Coordinate with Threat Intelligence to enrich investigations, track adversary TTPs, and proactively hunt for indicators of compromise.
• Partner with Engineering teams to tune detections, improve log fidelity, and strengthen preventive controls.
• Create clear, actionable incident reports and executive summaries; contribute to metrics and trend analysis.
• Support purple team exercises and post-incident reviews to capture lessons learned and drive continuous improvement.
• Ensure adherence to regulatory and security policies; maintain audit-ready documentation for investigations and incidents.

To be successful in this role, we re seeking the following:

• 5+ years of experience in SOC operations, incident response, or threat detection (Tier 2 level).
• Strong hands-on expertise with: SIEM platforms (e.g., Splunk, Sentinel, QRadar) , EDR tools (e.g., CrowdStrike, Microsoft Defender) , SOAR platforms
• Deep understanding of: Network security, Windows/Linux systems, and identity management , Cloud logging and security monitoring
• Experience with: MITRE ATT&CK framework, threat hunting, and detection tuning , Incident response frameworks (NIST 800-61, NIST CSF, CIS Controls)
• Strong analytical, problem-solving, and stakeholder management skills.
• Proficiency in scripting/automation (Python, PowerShell).
• Excellent documentation and communication skills, including executive reporting.
• Relevant certifications such as GCIH, GCIA, GCFA, GNFA, CISSP, or CCSP or equivalent experience
• Experience with: Case management tools (e.g., ServiceNow) , Threat intelligence platforms and malware analysis tools
• Prior exposure to large-scale enterprise SOC environments.
• The position requires flexibility to work across shifts and to support weekend and public holiday coverage as operational needs require.