SOC Analyst - L2

R360 Group; Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Reward360 in Bengaluru is seeking a proactive SOC Analyst (L2) to join our Security Operations Center and safeguard our digital infrastructure from cyber threats and fraud vectors.

We require 3–4 years of cybersecurity experience, with at least 2 years in a busy SOC, and hands-on skills with SIEM, EDR, and threat intelligence.

Qualifications

• Bachelor’s or Master’s degree in CS/IT/C cyber security or equivalent.
• Certifications such as CEH/CISSP/GCFE/GCFA/CCNP Security/CCIE Security preferred.
• Minimum 3 years in cybersecurity with 2 years in a fast-paced SOC.

Responsibilities

• Validate, investigate, and escalate security alerts.
• Analyze logs from SIEM, firewalls, and cloud proxies.
• Conduct threat and IoC analysis; respond to vulnerabilities.
• Create SIEM content: filters, correlations, dashboards, alerts.
• Collaborate with Tier-1, engineering and threat intel teams.

Skills

Incident triage

Security monitoring

Threat analysis

Scripting basics

Communication

Education

BE / B.Tech / M.Tech / MSc / MCA in CS/IT/Cyber Security

Certifications (CEH, CISSP, GCFE, GCFA, CCNP Security, CCIE Security)

Tools

CrowdStrike

SentinelOne

Wazuh

ELK Stack

HIPS/NIPS

Wireshark

EDR

WAF

ServiceNow

Remedy

Job description

Category: Managed Detection And Response

Experience: 3 to 4 Years

About Reward360

Reward360 is India's premier loyalty rewards and e-commerce platform manager, delivering cutting-edge transaction and engagement solutions to global banks, brands, and enterprise clients. As we scale our ecosystem to process millions of transactions securely, we are expanding our cybersecurity defense. We are seeking a proactive and technically proficient SOC Analyst (L2) to join our Security Operations Center and safeguard our digital infrastructure against emerging cyber threats, fraud vectors, and account takeovers.

Core Responsibilities

• Incident Triage & Response: Validate, investigate, and elevate critical security alerts. Correlate data across complex enterprise infrastructures, cloud environments, and transactional applications.
• Log & Metric Monitoring: Provide continuous analysis and trending of security log data from heterogeneous infrastructure components including SIEM, firewalls, and cloud access proxies.
• Threat & Vulnerability Management: Conduct deep-dive analysis of threat vectors and active indicators of compromise (IoCs). Respond effectively to zero-day vulnerabilities.
• Security Content Creation: Construct SIEM content (e.g., active filters, custom correlation rules, dashboards, and situational alerts) to enhance detection mechanisms.
• Collaborative Investigation: Investigate, document, and report on emerging threat trends. Partner with Tier-1 analysts, engineering teams, and threat intelligence groups to ensure swift containment.
• 24x7 Operations: Operate effectively within a 24x7 rotating Security Operations Centre (SOC) shift environment to maintain uninterrupted organizational security posture.

Technical Qualifications & Skills

Education & Professional Certifications

• Degree: BE / B.Tech / M.Tech / MSc / MCA qualification in Computer Science, Information Technology, Cyber Security, or an equivalent field.
• Certifications (At least one preferred): CEH, CISSP, GCFE, GCFA, CCNP Security, CCIE Security, or equivalent cybersecurity credentials.

Required Domain Experience

• Cybersecurity Focus: Minimum 3 years of overall cybersecurity experience, with at least 2 years dedicated exclusively to a fast-paced SOC environment.
• Tools Expertise: Proficiency with industry-standard SIEM platforms (e.g., Crowdstrike, SentinleOne, Wazuh,ELK Stack ) alongside core tools like HIPS/NIPS, Packet Analysis (Wireshark), Endpoint Detection and Response (EDR), and Web Application Firewalls (WAF).
• Ticketing & Workflows: Practical exposure to enterprise ticketing suites such as ServiceNow or Remedy for incident lifestyle tracking.
• Networking Foundations: Comprehensive understanding of TCP/IP protocols, subnetting, application layers, and basic network monitoring.
• OS Flavors: Solid diagnostic exposure to various OS architectures, specifically Windows Server ecosystem, Linux distributions, and Unix-based systems.
• Scripting: Basic hands-on automation or analysis scripting capability using languages like Python, bash,or Go.

Soft Skills & Workplace Attributes

• Communication: Strong verbal and written communication skills with the capability to draft crisp, analytical visual threat summaries and technical incident response briefs for diverse engineering stakeholders.
• Problem-Solving: An analytical mindset focused on dissecting attack methodologies, finding root causes, and formulating defensive strategies.