SOC Analyst – Endpoint & Network Security Operations

Delta6Labs; Dadri; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Delta6Labs is seeking a SOC Analyst specializing in Endpoint & Network Security Operations in Dadri, India. The role focuses on investigating endpoint alerts and network anomalies to protect our internal environment, while aligning with fintech-/crypto-aware security goals.

You will operate 24x7, review suspicious host activity, correlate signals with cloud events, and support containment and escalation workflows across teams.

Qualifications

• Experience in Endpoint and Network Security Operations.
• Hands-on investigation of host and network security events.
• Familiarity with cloud and IAM-related security signals is a plus.

Responsibilities

• Investigate endpoint alerts with CrowdStrike.
• Review host behavior and indicators of compromise.
• Investigate network/perimeter activity with FortiGate.
• Assess inbound/outbound traffic, VPN anomalies and access attempts.
• Correlate endpoint incidents with Cloudflare edge activity.
• Review outbound behaviour and cloud security signals with Netskope.
• Support endpoint isolation and escalation workflows.
• Correlate signals with IAM, email, and cloud events.
• Suggest monitoring or hardening improvements based on patterns.
• Operate 24x7.

Skills

Endpoint Security Ops

Network Security Ops

EDR investigation

Network event analysis

IOC/IOA validation

Host containment coordination

Suspicious process & traffic review

Firewall/Proxy/WAF awareness

Cloud/edge security awareness

AWS network awareness

Tools

CrowdStrike

NetSkope

FortiGate

Job description

SOC Analyst – Endpoint & Network Security Operations

Open

Summary

This role supports endpoint- and network-focused investigations across the internal environment. It is responsible for reviewing suspicious host activity, network anomalies, hostile connectivity patterns, remote access risks, and related operational threats. The role helps preserve strong traditional SOC coverage across infrastructure while supporting the SOC’s maturity into a more fintech-/crypto-aware function.

Key Responsibilities

• Investigate endpoint-related alerts using CrowdStrike
• Review suspicious host behavior, including suspicious processes, execution anomalies, remote access behavior, and early indicators of compromise
• Investigate suspicious network or perimeter activity using FortiGate
• Review hostile inbound/outbound traffic, VPN anomalies, suspicious external access attempts, and network patterns that may indicate misuse
• Correlate endpoint incidents with Cloudflare edge activity to determine whether attacks originated externally
• Investigate suspicious outbound behavior, risky cloud access, or exfiltration-adjacent signals using Netskope
• Support endpoint isolation, containment, and escalation workflows
• Correlate endpoint and network signals with IAM, email, and cloud events
• Recommend monitoring or hardening improvements based on recurring patterns
• 24×7 operations

Mandatory Expertise

• Endpoint and Network Security Operations

Good to Have

• CrowdStrike and/or NetSkope

Optional

• Microsoft AD

Preferred Additional Skills

• EDR investigation
• Network event analysis
• Host containment coordination
• IOC/IOA validation
• Suspicious process and traffic review
• Firewall/proxy / WAF awareness
• Basic AWS network context awareness
• Cloudflare edge/perimeter investigation

Preferred Certifications

• Security+
• CySA+
• GCIH
• SC-200

Job Summary

Location Noida, India

Job Type Full-time

Date Posted June 19, 2026

Experience 5-7 Years

Working Hours 9:00 AM - 6:00 PM