SOC Analyst Level 3

Tekskills Inc.; Chennai; On-site; INR 3,000,000 - 4,500,000; Full time

Job summary

Tekskills Inc. is seeking an experienced security operations professional in Chennai to lead incident response and develop robust use cases. The role focuses on crafting detection logic, monitoring log sources, and leveraging SIEM platforms to improve threat detection and response.

The candidate will drive incident response workflows, triage complex events, and coordinate with multiple teams to implement remediation. A strong emphasis on KPI/KRI reporting and continuous improvement is required.

Qualifications

• 5+ years of experience in security operations and incident response.
• Experience designing detection rules based on organizational risks and threats.
• Knowledge of log formats, sources, and parsing for use cases.
• Hands-on with SIEM platforms such as Securonix, Sentinel, or Splunk.
• Ability to define thresholds, logic, and conditions to reduce false positives.
• Awareness of incident response workflows to align use cases with actionable intelligence.
• Experience creating KPI/KRI reports to track detection and response performance.
• Experience in refining use cases and logic through data analysis and tuning.

Responsibilities

• Incident response lead for high impact cyber security incidents.
• Triage events, escalations and incidents to determine remediation and resolution actions.
• Coordinate appropriate response activities across teams or with stakeholders to rapidly remediate threats.
• Develop playbooks to improve processes and information sharing across teams.
• Provide security operations and incident response perspective on initiatives and projects.
• Contribute technical and process improvements within the team.
• Participate in current operations, on-call rotation, including some after-hours responsibilities and escalations.

Skills

Use Case Dev

Log Sources

SIEM Tools

Alert Thresholds

Incident Response

KPIs/KRIs

Fine-Tuning

Lead IR

Team Coordination

Tools

Securonix

Sentinel

Splunk

Job description

Job Description:

Minimum 5+ years of experience

• Use Case Development: Knowledge of organizational risks and threats to design relevant and effective detection rules.
• Log Sources: Understanding log formats, sources, and parsing for accurate data utilization in use cases.
• SIEM and Analytics Tools: Familiarity with platforms like Securonix, Sentinel, or Splunk to implement and monitor use cases.
• Alert Logic: Ability to define thresholds, logic, and conditions to reduce false positives and improve detection accuracy.
• Incident Response Needs: Awareness of incident response workflows to align use cases with actionable intelligence.
• Performance Metrics: Skills to create and optimize KPI/KRI reports to track detection and response performance.
• Fine-Tuning Methodology: Experience in analyzing alert data to refine use cases and adjust logic periodically. Detect and respond to company-wide security incidents, coordinating cross-functional teams to mitigate and eradicate threats.
• Incident response lead for high impact cyber security incidents
• Triage events, escalations and incidents to determine remediation and resolution actions
• Coordinate appropriate response activities across teams or directly with stakeholders to rapidly remediate potential threats
• Develop playbooks to improve processes and information sharing across teams
• Initiative and project-related support to provide Security Operations and Incident Response perspective and subject matter expertise
• Contribute technical and process improvements within the team
• Participate in current operations, on call rotation. Which includes some after-hours responsibilities and escalations.