Soc Analyst

Incedo; Gurugram District; On-site; INR 1,800,000 - 2,400,000; Full time

Benefits offered by this job

24x7 Rotational Shift

Willingness to work on weekends/holid-

Job summary

Incedo is seeking a SOC Analyst (L2) to join the Security Operations Center in Gurugram. You will investigate incidents, perform alert triage and log analysis, and coordinate remediation with L3 teams across on-premises, cloud, and identities.

The role requires 4–7 years in cyber security operations, hands-on experience in incident response, and strong proficiency with SIEMs (Splunk/QRadar/Sentinel), EDR/XDR tools, and network fundamentals. Willingness for 24x7 shifts is expected.

Qualifications

• 4–7 years in Cyber Security Operations / SOC.
• 3+ years hands-on in security monitoring, incident investigation, and incident response.

Responsibilities

• Investigate and analyze security incidents escalated by the L1 SOC team
• Perform alert triage, log analysis, event correlation, and root cause analysis
• Validate security alerts and distinguish true positives from false positives
• Investigate phishing, malware, unauthorized access, privilege escalation, and cloud security incidents
• Monitor and analyze security events across endpoints, networks, cloud, and identity platforms
• Coordinate with L3 engineers, infrastructure teams, and other stakeholders for incident remediation
• Maintain incident documentation, investigation reports, and ticket updates
• Ensure SLA adherence in a 24x7 SOC environment

Skills

SIEM: Splunk/QRadar/Sentinel

EDR/XDR: CrowdStrike/Defender/Sentinel

Security Monitoring

Log Analysis

Threat Analysis

Networking basics

Education

Bachelor's degree in Computer Science/IT/Cyber Security

Tools

Windows

Linux

Active Directory

Microsoft 365

CloudTrail

Job description

Role & responsibilities

Preferred candidate pro

Job Description SOC Analyst (L2)

Role: Security Operations Center (SOC) – L2 Analyst

Experience

• 4–7 years of experience in Cyber Security Operations / SOC
• 3+ years of hands-on experience in security monitoring, incident investigation, and incident response

Key Responsibilities

• Investigate and analyze security incidents escalated by the L1 SOC team
• Perform alert triage, log analysis, event correlation, and root cause analysis
• Validate security alerts and distinguish true positives from false positives
• Investigate phishing, malware, unauthorized access, privilege escalation, and cloud security incidents
• Monitor and analyze security events across endpoints, networks, cloud, and identity platforms
• Coordinate with L3 engineers, infrastructure teams, and other stakeholders for incident remediation
• Maintain incident documentation, investigation reports, and ticket updates
• Ensure SLA adherence in a 24x7 SOC environment

Must-Have Skills

• SIEM: Splunk, QRadar, Microsoft Sentinel, LogRhythm
• EDR/XDR: CrowdStrike, Microsoft Defender, SentinelOne, Cortex XDR
• Security Monitoring: Firewall, IDS/IPS, WAF, VPN, Email Security, Endpoint Security
• Log Analysis: Windows, Linux, Active Directory, Microsoft 365, CloudTrail
• Threat Analysis: IOC validation, Threat Intelligence, MITRE ATT&CK
• Networking: TCP/IP, DNS, HTTP/HTTPS, SMTP

Good-to-Have Skills

• AWS or Azure security
• PowerShell or Python
• Knowledge of the NIST Incident Response Framework

Preferred Certifications

• Security+
• SC-200
• CEH
• CySA+
• Splunk Certified User
• IBM QRadar SIEM Foundation

Education

Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.

Work Location & Shift

• 24x7 rotational shift
• Willingness to work on weekends and holidays as required

Naukri Search Keywords

SOC, SIEM, Splunk, QRadar, Microsoft Sentinel, EDR, CrowdStrike, Incident Response, Threat Hunting, Log Analysis file

Perks and benefits