Soc Analyst 2

Independent Recruitment Consultant (freelancer); Kozhikode district; Remote; INR 700,000 - 1,200,000; Full time

Job summary

Independent Recruitment Consultant (freelancer) seeks a mid-level SOC Analyst L2 in Kerala for remote work serving international clients, with a 24/7 shift rotation. The role emphasizes security monitoring, threat detection, incident response, and client-facing reporting.

Requirements include a 3–6 year cybersecurity background, a related bachelor's degree, CEH or Security+, strong English skills, basic Arabic, and willingness to work rotating shifts to cover global operations.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT or related field.
• 4–5 years of SOC/Cybersecurity experience.
• CEH or CompTIA Security+ certification mandatory.
• Preferred: CySA+, SC-200, GCIH, CHFI or equivalent.
• Excellent English communication, documentation, and client-handling skills; Basic Arabic reading/writing.
• Willingness to work in rotating shifts to support global clients.

Responsibilities

• Monitor security events with SIEM; perform incident triage, threat analysis, containment, and root-cause analysis.
• Develop SIEM rules, alerts, dashboards, and detection use cases.
• Threat hunting and investigations across endpoints, network, identity, and cloud security.
• Analyze logs from Windows, Linux, DNS, VPN, and proxies.
• Support remediation and reporting to international clients.
• Maintain SOC playbooks, escalation procedures, and knowledge-base documentation.

Skills

SIEM & EDR/XDR

Networking & Systems

Threat Frameworks

Scripting

English communication

Arabic basics

Education

Bachelor's degree in Cybersecurity/CS/IT

CEH or CompTIA Security+

CySA+, SC-200, GCIH, CHFI (preferred)

Tools

Nessus

Qualys

OpenVAS

Rapid7

PowerShell

Python

Bash

KQL

Job description

SOC Analyst L2

Location: Calicut

Employment Type: Full-Time (Remote work for international clients | 24/7 Shift Rotation)

Experience Level: Mid-Level (3 - 6 Years)

Salary: Negotiable based on experience

About the Role

We are expanding our operations in Kerala. We are seeking an experienced SOC Analyst to join our team. In this role, you will deliver security monitoring, threat detection, incident investigation, and response services for international clients.

Qualifications & Requirements

• Education: Bachelors degree in Cybersecurity, Computer Science, IT, or a related field.
• Experience: 4–5 years of relevant SOC/Cybersecurity experience.
• Mandatory Certifications: CEH or CompTIA Security+.
• Preferred Certifications: CySA+, SC-200, GCIH, CHFI, or equivalent.
• Languages & Soft Skills: Excellent English communication, documentation, and client-handling skills. Basic Arabic reading/writing ability is required.
• Flexibility: Willingness to work in rotating shifts to support global clients.

Technical Skills

• SIEM & EDR/XDR: Hands-on experience with Microsoft Sentinel, Splunk, IBM QRadar, Elastic, or LogRhythm; experience with Microsoft Defender, CrowdStrike, SentinelOne, or Sophos.
• Networking & Systems: Strong understanding of TCP/IP, DNS, HTTP/HTTPS, VPNs, firewalls, IDS/IPS, email security, Windows, Linux, Active Directory, M365, and cloud environments.
• Frameworks & Threats: Familiarity with MITRE ATT&CK, Cyber Kill Chain, IOC analysis, and threat-intelligence platforms; solid grasp of malware, phishing, ransomware, brute-force, privilege escalation, and exfiltration vectors.
• Vulnerability Assessment: Experience with tools like Nessus, Qualys, OpenVAS, or Rapid7.
• Scripting: Basic automation or scripting skills in PowerShell, Python, Bash, or KQL.

Key Responsibilities

• Security Monitoring & Triage: Monitor and investigate security events using SIEM platforms; perform incident triage, threat analysis, containment, and root-cause analysis.
• Detection Engineering: Develop and fine-tune SIEM correlation rules, alerts, dashboards, and detection use cases.
• Threat Hunting & Investigation: Conduct threat hunting using IOCs and attacker behavior; investigate endpoint, network, email, identity, and cloud security incidents.
• Log Analysis: Analyze Windows, Linux, firewall, VPN, Active Directory, DNS, proxy, and application logs.
• Vulnerability & Remediation: Support vulnerability assessments, risk prioritization, and remediation tracking.
• Reporting & Client Communication: Prepare incident reports, executive summaries, and security recommendations; communicate findings directly to international clients.
• Process Enhancement: Maintain SOC playbooks, escalation procedures, and knowledge-base documentation.