SOC Analyst _ L3 _Sentinel

Capgemini; Hyderabad, Bengaluru, Mumbai; Hybrid; INR 1.500.000 - 2.500.000; Vollzeit

Zusammenfassung

Capgemini in Hyderabad is seeking an experienced SOC Analyst L3 to lead advanced threat investigations, incident response, threat hunting and security monitoring. You will leverage Microsoft Sentinel, Defender XDR and MITRE ATT&CK to protect enterprise environments.

Responsibilities include developing detection rules, performing root-cause analysis, and producing incident reports. Collaboration withDetection Engineering, SOC, and Threat Intelligence teams is essential.

Qualifikationen

• Lead advanced threat investigations and incident response across enterprise environments.
• Expertise with Microsoft Sentinel and Defender XDR for threat detection and monitoring.
• Strong knowledge of MITRE ATT&CK framework and real-time threat hunting.
• Proficient in KQL for rule tuning, SIEM monitoring, and investigations.
• Experience with cloud security (Azure/M365) and malware analysis.

Aufgaben

• Investigate and respond to complex security incidents and threats.
• Perform advanced threat hunting and root cause analysis.
• Develop and tune detection rules, use cases, and correlation logic.
• Analyze malware, phishing, identity-based, cloud, and endpoint threats.
• Support incident containment, remediation, and recovery activities.
• Collaborate with Detection Engineering, SOC, and Threat Intelligence teams.
• Create incident reports, playbooks, and security recommendations.

Kenntnisse

Microsoft Sentinel

Microsoft Defender XDR

Incident Response

Threat Hunting

MITRE ATT&CK

KQL

SIEM Monitoring & Investigation

Malware Analysis

Email Security

Cloud Security (Azure/M365)

Tools

Python

PowerShell

MISP

DFIR

YARA

Sigma

EDR/XDR Technologies

Jobbeschreibung

We are looking for an experienced SOC Analyst L3 to lead advanced threat investigations, incident response, threat hunting, and security monitoring activities. The ideal candidate will have strong expertise in Microsoft Sentinel, Defender XDR, threat detection, and cyber incident handling across enterprise environments.

Key Responsibilities:

• Investigate and respond to complex security incidents and threats.
• Perform advanced threat hunting and root cause analysis.
• Develop and tune detection rules, use cases, and correlation logic.
• Analyze malware, phishing, identity-based, cloud, and endpoint threats.
• Support incident containment, remediation, and recovery activities.
• Collaborate with Detection Engineering, SOC, and Threat Intelligence teams.
• Create incident reports, playbooks, and security recommendations.

Required Skills:

• Microsoft Sentinel
• Microsoft Defender XDR
• Incident Response
• Threat Hunting
• MITRE ATT&CK
• KQL
• SIEM Monitoring & Investigation
• Malware Analysis
• Email Security
• Cloud Security (Azure/M365)

Preferred Skills:

• Python or PowerShell
• Threat Intelligence
• MISP
• DFIR
• YARA / Sigma
• EDR/XDR Technologies