SOC Analyst- L2

Prudent Globaltech Solutions; Chennai; On-site; INR 700,000 - 1,100,000; Full time

Job summary

Prudent Globaltech Solutions is seeking an experienced SOC Analyst L2 to investigate escalated security incidents, conduct threat hunting, and develop detection use cases. You will analyse logs, manage incident response, and provide expert guidance across SIEM platforms and security monitoring.

The role focuses on incident scoping, root-cause analysis, and collaboration with cross-functional teams to enhance detection capabilities and reduce false positives.

Qualifications

• SOC Analyst L2 with hands-on experience
• Threat hunting and advanced log analysis
• Incident investigation, containment coordination and response
• Detection engineering and use-case development
• Experience with endpoint, network, identity and cloud security events
• Incident reporting and stakeholder communication

Responsibilities

• Investigate and resolve incidents escalated by L1 analysts.
• Perform threat hunting across endpoint, network, identity, and cloud logs.
• Analyze IOCs, suspicious processes, malicious IPs, and unusual authentication activity.
• Conduct incident scoping, root-cause analysis, and impact assessment.
• Develop, tune, and test SIEM detection rules and correlation searches.
• Create new detection use cases to address threats and gaps in monitoring.
• Reduce false positives and improve alert quality.
• Coordinate with infrastructure, network, endpoint, and identity teams during investigations.
• Maintain incident reports, technical documentation, and response timelines.
• Support security frameworks, compliance requirements, and SOC process improvements.
• Mentor L1 analysts and improve triage and escalation procedures.

Skills

SOC Analyst L2

Threat Hunting

SIEM

Log Analysis

Incident Investigation

Detection Engineering

Tools

Splunk

Job description

Job Summary

We are looking for an experienced SOC Analyst L2 to investigate escalated security incidents, perform threat hunting, conduct root-cause analysis, and develop detection use cases. The candidate should have strong hands-on experience with SIEM platforms, incident response, log analysis, and security monitoring.

Key Responsibilities

• Investigate and resolve incidents escalated by L1 analysts.
• Perform threat hunting across endpoint, network, identity, and cloud logs.
• Analyze indicators of compromise (IOCs), suspicious processes, malicious IPs, and unusual authentication activity.
• Conduct incident scoping, root-cause analysis, and impact assessment.
• Develop, tune, and test SIEM detection rules and correlation searches.
• Create new detection use cases to address emerging threats and monitoring gaps.
• Reduce false positives and improve alert quality.
• Coordinate with infrastructure, network, endpoint, and identity teams during investigations.
• Maintain incident reports, technical documentation, and response timelines.
• Support security frameworks, compliance requirements, and SOC process improvements.
• Mentor L1 analysts and improve triage and escalation procedures.

Must-Have Skills

• Strong SIEM experience, preferably Splunk or another enterprise SIEM.
• Threat hunting and advanced log analysis.
• Incident investigation, containment coordination, and response.
• Detection engineering and use-case development.
• Knowledge of endpoint, network, identity, and cloud security events.
• Incident reporting, root-cause analysis, and stakeholder communication.

Preferred Certifications

• CISSP, CompTIA Security+, or other relevant cybersecurity certifications. Confirm which credentials are mandatory versus preferred.

Required Skills

• SOC Analyst L2
• Threat Hunting
• SIEM
• Log Analysis