SOC Analyst / Security Engineer – L2

Provisiontech; Gangtok; On-site; INR 600,000 - 1,200,000; Full time

Job summary

Provision Technologies LLP in Gangtok, Sikkim is seeking a hands-on SOC Analyst / Security Engineer - L2 to join our Security Operations team. You will investigate incidents, determine impact and drive the right response in a critical infrastructure environment.

The role emphasizes incident investigation, threat hunting, detection engineering and collaboration with IT/OT during major incidents, with on-site 24×7 operations.

Qualifications

• 3–5 years of relevant SOC/CD security experience.
• Hands-on experience with security monitoring and incident response.
• Certifications such as CEH, CySA+, or related are advantageous.

Responsibilities

• Monitor and investigate security events using SIEM, EDR, firewall and network telemetry.
• Perform incident investigation, response and root-cause analysis.
• Conduct threat hunting, IOC analysis and threat intelligence enrichment.
• Identify attack vectors, scope and impact; support containment and remediation.
• Tune SIEM rules and improve detection use cases.
• Coordinate with SOAR, UEBA, NBAD and MITRE ATT&CK frameworks.
• Review and guide L1 escalations during complex incidents.
• Prepare incident reports, timelines, RCA and remediation recommendations.
• Contribute to SOC SOPs, playbooks and continuous improvement.
• Coordinate with IT/OT teams during significant security incidents.

Skills

SIEM SOC operations

Incident Response

Root Cause Analysis

Log analysis & correlation

EDR & ICS network security

Windows & Linux security

MITRE ATT&CK

SOAR / UEBA / NBAD

OT/SCADA/ICS exposure

Education

B.Tech/B.E./BCA/MCA/M.Sc. in CS/IT/Cybersecurity or equivalent

Tools

SIEM

EDR

IDS/IPS

SOAR

UEBA

NBAD

Job description

Company: Provision Technologies LLP
Location: Gangtok, Sikkim
Employment type: Full-time | On-site
Experience: 3–5 years | Full-time
Work mode: 8×6

About the role:

Provision Technologies LLP is looking for a hands-on SOC Analyst / Security Engineer - L2 to join our Security Operations team supporting a critical infrastructure environment. We are looking for someone who can investigate incidents, understand what happened, identify the impact and drive the right response, rather than simply monitor and expand alerts.

Key responsibilities

• Monitor and investigate security events using SIEM, EDR, firewall and network telemetry
• Perform incident investigation, response and root - cause analysis
• Conduct threat hunting, IOC analysis and threat intelligence enrichment
• Identify attack vectors, scope and impact, and support containment and remediation
• Tune SIEM rules and improve detection use cases
• Work with SOAR, UEBA, NBAD and MITRE ATT&CK
• Review and guide L1 escalations during complex incidents
• Prepare incident reports, timelines, RCA and remediation recommendations
• Contribute to SOC SOPs, playbooks and continuous improvement
• Coordinate with IT/OT teams during significant security incidents

Required skills

• Strong hands-on experience with SIEM and SOC operations
• Incident Response, Threat Hunting and Root Cause Analysis
• Log analysis, event correlation and detection engineering
• EDR, firewall, IDS/IPS and network security
• Windows and Linux security
• Threat Intelligence and MITRE ATT&CK
• Knowledge of SOAR, UEBA and NBAD is an advantage
• Exposure to OT/SCADA/ICS or critical infrastructure security is a plus

Qualification & experience

• B.Tech/B.E./BCA/MCA/M.Sc. in Computer Science, IT, Cybersecurity or equivalent
• 3-5 years of relevant SOC/Cybersecurity experience
• Minimum 3 years of hands-on SOC, SIEM, security monitoring or incident response experience
• Relevant certifications such as CEH, CySA+, GCIH, Security+, SC-200 are an advantage

Important

This is an on-site position in Gangtok, Sikkim. Candidates must be willing to relocate to Gangtok and work in a SOC environment supporting 24×7 operations.