SOC Analyst L2

Prudent Technologies and Consulting, Inc.; Hyderabad; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Prudent Technologies and Consulting, Inc. is seeking an experienced SOC Analyst L2 to investigate escalated security incidents, perform threat hunting, and develop detection use cases.

The role requires hands-on expertise with SIEM platforms, incident response, log analysis, and security monitoring. The successful candidate will mentor L1 analysts, coordinate with cross-functional teams, and contribute to SOC process improvements while supporting compliance requirements.

Qualifications

• Requires strong SIEM experience with enterprise platforms.
• Experience in threat hunting and advanced log analysis.
• Proficient in incident investigation and containment coordination.
• Proficient in detection engineering and use-case development.
• Knowledge of endpoint, network, identity, and cloud security events.
• Experience in incident reporting and root-cause analysis.

Responsibilities

• Investigate and resolve incidents escalated by L1 analysts.
• Perform threat hunting across endpoints, networks, identities, and cloud logs.
• Analyze IOCs, suspicious processes, malicious IPs, and unusual logins.
• Develop, tune, and test SIEM detection rules.
• Create new detection use cases to address threats.
• Reduce false positives and improve alert quality.
• Coordinate with infra, network, endpoint, and identity teams.
• Maintain incident reports, documentation, and timelines.
• Support security frameworks and SOC process improvements.
• Mentor L1 analysts and improve triage/escalation procedures.

Skills

SIEM experience

Threat hunting

Incident investigation

Detection engineering

Endpoint security

Network security

Identity security

Cloud security

Incident reporting

Tools

Splunk

Job description

We are looking for an experienced SOC Analyst L2 to investigate escalated security incidents, perform threat hunting, conduct root-cause analysis, and develop detection use cases. The candidate should have strong hands-on experience with SIEM platforms, incident response, log analysis, and security monitoring.

Key Responsibilities

• Investigate and resolve incidents escalated by L1 analysts.
• Perform threat hunting across endpoint, network, identity, and cloud logs.
• Analyze indicators of compromise (IOCs), suspicious processes, malicious IPs, and unusual authentication activity.
• Conduct incident scoping, root-cause analysis, and impact assessment.
• Develop, tune, and test SIEM detection rules and correlation searches.
• Create new detection use cases to address emerging threats and monitoring gaps.
• Reduce false positives and improve alert quality.
• Coordinate with infrastructure, network, endpoint, and identity teams during investigations.
• Maintain incident reports, technical documentation, and response timelines.
• Support security frameworks, compliance requirements, and SOC process improvements.
• Mentor L1 analysts and improve triage and escalation procedures.

Must-Have Skills

• Strong SIEM experience, preferably Splunk or another enterprise SIEM.
• Threat hunting and advanced log analysis.
• Incident investigation, containment coordination, and response.
• Detection engineering and use-case development.
• Knowledge of endpoint, network, identity, and cloud security events.
• Incident reporting, root-cause analysis, and stakeholder communication.

Preferred Certifications

CISSP, CompTIA Security+, or other relevant cybersecurity certifications. Confirm which credentials are mandatory versus preferred.