SOC Analyst L2

Independent Recruitment Consultant (freelancer); Kozhikode district; Remote; INR 600,000 - 900,000; Full time

Job summary

Independent Recruitment Consultant (freelancer) seeks an experienced SOC Analyst L2 to monitor security events, detect threats, investigate incidents, and coordinate responses for international clients. This remote role requires strong English communication and a willingness to work rotating shifts.

Ideal candidates hold a Bachelor's in Cybersecurity/CS, 4–5 years SOC experience, and certifications such as CEH or Security+. Proficiency with SIEM tools and scripting is advantageous.

Qualifications

• Education: Bachelor's degree in Cybersecurity, CS, IT or related field.
• Experience: 4–5 years in SOC/Cybersecurity.
• Certifications: CEH or CompTIA Security+.
• Preferred Certifications: CySA+, SC-200, GCIH, CHFI or equivalent.
• Languages & Soft Skills: Excellent English communication, documentation, and client-handling skills; basic Arabic reading/writing.

Responsibilities

• Security Monitoring & Triage: Monitor events using SIEM; perform triage, threat analysis, containment.
• Detection Engineering: Develop SIEM rules, alerts, dashboards, and use cases.
• Threat Hunting & Investigation: Hunt using IOCs and attacker behavior; investigate incidents.
• Log Analysis: Analyze Windows, Linux, firewall, VPN, AD, DNS logs.
• Vulnerability & Remediation: Support vulnerability assessments and remediation tracking.
• Reporting & Client Communication: Prepare incident reports and recommendations for clients.
• Process Enhancement: Maintain playbooks and knowledge-base documentation.

Skills

SIEM/EDR

Threat Hunting

Incident Response

Log Analysis

Networking

Scripting

English Proficiency

Client Handling

Education

Bachelor's degree in Cybersecurity/CS

Job description

SOC Analyst L2Location: Calicut Employment Type: Full-Time (Remote work for international clients | 24/7 Shift Rotation) Experience Level: Mid-Level (3 - 6 Years) Salary: Negotiable based on experience

About the Role

We are expanding our operations in Kerala. We are seeking an experienced SOC Analyst to join our team. In this role, you will deliver security monitoring, threat detection, incident investigation, and response services for international clients.

Qualifications & Requirements

• Education: Bachelors degree in Cybersecurity, Computer Science, IT, or a related field.
• Experience: 45 years of relevant SOC/Cybersecurity experience.
• Mandatory Certifications: CEH or CompTIA Security+.
• Preferred Certifications: CySA+, SC-200, GCIH, CHFI, or equivalent.
• Languages & Soft Skills: Excellent English communication, documentation, and client-handling skills. Basic Arabic reading/writing ability is required.
• Flexibility: Willingness to work in rotating shifts to support global clients.

Technical Skills

• SIEM & EDR/XDR: Hands-on experience with Microsoft Sentinel, Splunk, IBM QRadar, Elastic, or LogRhythm; experience with Microsoft Defender, CrowdStrike, SentinelOne, or Sophos.
• Networking & Systems: Strong understanding of TCP/IP, DNS, HTTP/HTTPS, VPNs, firewalls, IDS/IPS, email security, Windows, Linux, Active Directory, M365, and cloud environments.
• Frameworks & Threats: Familiarity with MITRE ATT&CK, Cyber Kill Chain, IOC analysis, and threat-intelligence platforms; solid grasp of malware, phishing, ransomware, brute-force, privilege escalation, and exfiltration vectors.
• Vulnerability Assessment: Experience with tools like Nessus, Qualys, OpenVAS, or Rapid7.
• Scripting: Basic automation or scripting skills in PowerShell, Python, Bash, or KQL.

Key Responsibilities

• Security Monitoring & Triage: Monitor and investigate security events using SIEM platforms; perform incident triage, threat analysis, containment, and root-cause analysis.
• Detection Engineering: Develop and fine-tune SIEM correlation rules, alerts, dashboards, and detection use cases.
• Threat Hunting & Investigation: Conduct threat hunting using IOCs and attacker behavior; investigate endpoint, network, email, identity, and cloud security incidents.
• Log Analysis: Analyze Windows, Linux, firewall, VPN, Active Directory, DNS, proxy, and application logs.
• Vulnerability & Remediation: Support vulnerability assessments, risk prioritization, and remediation tracking.
• Reporting & Client Communication: Prepare incident reports, executive summaries, and security recommendations; communicate findings directly to international clients.
• Process Enhancement: Maintain SOC playbooks, escalation procedures, and knowledge-base documentation.