Soc Analyst 2

Outworx Solutions; Navi Mumbai; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Outworx Solutions is seeking a skilled SOC Security Analyst in Navi Mumbai to monitor security events, perform real-time triage, and lead investigations in a 5-day office-based schedule.

You will work with SIEM Azure Sentinel, EDR tools, and cloud platforms while developing runbooks and response playbooks to strengthen defenses and reduce risk.

Qualifications

• Strong analytical and problem-solving skills for incident triage.
• Experience with SIEM, EDR, and cloud security platforms.
• Knowledge of Windows and Linux OS and cloud environments.
• Ability to work under pressure during security incidents.

Responsibilities

• Monitor security alerts from SIEM, EDR, IDS/IPS, and cloud platforms.
• Perform real-time and retrospective security analysis to identify threats.
• Lead initial triage and in-depth investigations of incidents.
• Develop incident response playbooks and detection use cases.
• Collaborate with teams for root-cause analysis and remediation.

Skills

Analytical thinking

Problem solving

Communication

Tools

Azure Sentinel

SIEM

EDR

Job description

Location : Navi Mumbai, Maharashtra, India

Mode : Work from office for 5 days

Shifts : Rotational

Interview Mode : Virtual (2 Technical Rounds)

Position Overview

We are seeking a highly skilled and motivated Security Operations Center (SOC) Security Analyst to join our cybersecurity team. The successful candidate will be responsible for monitoring security alerts, conducting real-time incident triage, and leading deep-dive investigations to protect our infrastructure from sophisticated cyber threats.

Key Responsibilities

• Monitor security alerts and events from various sources including SIEM, EDR, IDS/IPS, and cloud security platforms.
• Conduct real-time and retrospective security event analysis to identify suspicious behavior and potential threats.
• Execute initial triage and in-depth investigation of security incidents.
• Develop and maintain incident response procedures, threat detection use cases, and runbooks.
• Collaborate with internal teams to investigate security events, perform root cause analysis, and implement corrective actions.
• Participate in threat hunting activities and contribute to the enhancement of detection capabilities.
• Support tuning and maintenance of SIEM rules, alerts, and dashboards.
• Manage SOC documentation and reporting requirements.
• Stay current with the latest cybersecurity threats, trends, tools, and best practices.
• Participate in security assessments and audits as required.

Requirements & Qualifications

• Strong understanding of network protocols, operating systems (Windows, Linux), and cloud environments (Azure, GCP, AWS).
• Practical experience with SIEM tools -Azure Sentinel.
• Familiarity with threat intelligence platforms, endpoint detection and response (EDR), and malware analysis.
• Solid grasp of common attack vectors, tactics, and techniques.
• Comprehensive knowledge of incident response methodologies.
• Proven ability to analyze logs from various sources and correlate events for meaningful insights.
• Strong analytical and problem-solving skills with the ability to work under pressure during critical incidents.
• Good written and verbal communication skills for technical documentation and incident reporting.