SOC Analyst – Endpoint & Network Security Operations

Delta6Labs FinTech Pvt Ltd; Dadri; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Delta6Labs FinTech Pvt Ltd is looking for a SOC Analyst specializing in endpoint and network security operations. This role involves investigating endpoint-related alerts, suspicious host behaviors, and network anomalies critical for robust security. The candidate will utilize tools like CrowdStrike and FortiGate to ensure a secure infrastructure while enhancing the maturity of the SOC.

The position demands investigating remote access risks and recommending security improvements to better protect the company's fintech and crypto environments. Strong analytical skills and expertise in network security operations are essential.

Qualifications

• Experience in endpoint and network security investigations.
• Ability to review suspicious host and network activity.
• Competence in correlating attacks with cloud edge activity.

Responsibilities

• Investigate endpoint-related alerts using CrowdStrike.
• Review suspicious host behavior and execute response actions.
• Investigate suspicious network activity using FortiGate.
• Correlate incidents with cloud and network events.
• Recommend improvements based on recurring security patterns.

Skills

Endpoint and Network Security Operations

Tools

CrowdStrike

FortiGate

Cloudflare

Netskope

Job description

SOC Analyst – Endpoint & Network Security Operations

Summary

This role supports endpoint‑and network‑focused investigations across the internal environment. It is responsible for reviewing suspicious host activity, network anomalies, hostile connectivity patterns, remote access risks, and related operational threats. The role helps preserve strong traditional SOC coverage across infrastructure while supporting the SOC’s maturity into a more fintech‑/crypto‑aware function.

Key Responsibilities

• Investigate endpoint‑related alerts using CrowdStrike
• Review suspicious host behavior, including suspicious processes, execution anomalies, remote access behavior, and early indicators of compromise
• Investigate suspicious network or perimeter activity using FortiGate
• Review hostile inbound/outbound traffic, VPN anomalies, suspicious external access attempts, and network patterns that may indicate misuse
• Correlate endpoint incidents with Cloudflare edge activity to determine whether attacks originated externally
• Investigate suspicious outbound behavior, risky cloud access, or exfiltration‑adjacent signals using Netskope
• Support endpoint isolation, containment, and escalation workflows
• Correlate endpoint and network signals with IAM, email, and cloud events
• Recommend monitoring or hardening improvements based on recurring patterns

Mandatory Expertise

• Endpoint and Network Security Operations