SOC-L2

TechDefence Labs; Hyderabad; On-site; INR 900,000 - 1,500,000; Full time

Job summary

TechDefence Labs in Hyderabad, India is seeking a Cyber Security Analyst Level 2 to strengthen 24x7 SOC operations, focusing on security monitoring, incident response, brand protection, and threat intelligence.

The role involves leading complex investigations, mentoring junior analysts, developing advanced detection techniques, and collaborating with stakeholders to mitigate threats and improve security analytics.

Qualifications

• Bachelor's degree in information technology, CS or engineering.
• Security certifications such as Security+, CEH, GCIH, GCIA, GSEC, CISSP, CISM preferred.
• Minimum 3 years in SOC monitoring and incident management.

Responsibilities

• Lead monitoring, triaging, investigation, and remediation of security alerts within SLAs and guide L1 SOC analysts.
• Manage complex high-severity security incidents and coordinate with internal teams for containment.
• Develop advanced detection and analytical techniques to identify sophisticated threats and evolving TTPs.
• Conduct proactive threat hunting to identify hidden threats and indicators of compromise.
• Analyze large volumes of security data from SIEM, EDR, network, and other tools to detect novel threats.
• Collaborate with the Cyber Defense Center to improve threat-hunting strategies and security analytics.
• Perform root cause analysis and communicate findings to technical teams and leadership.
• Maintain SOPs, incident documentation, and end-of-shift reports.

Skills

SOC monitoring

Incident response

Threat intelligence

Mentoring juniors

Cross-functional collaboration

SIEM analysis

Education

Bachelors in IT/CS/Engineering

Tools

Microsoft Sentinel SIEM

EDR

CSPM

Job description

Role Overview:

We are seeking a skilled Cyber Security Analyst Level 2 to enhance our security monitoring, incident response, brand protection, and threat intelligence capabilities under 24x7 SOC operations. The Level 2 Security Analyst will play a critical role in identifying and mitigating potential threats through advanced monitoring, data analysis, and collaboration with various stakeholders. This role involves leading complex investigations, mentoring junior analysts, and developing advanced threat detection techniques.

Key Responsibilities:

• Lead the monitoring, triaging, investigation, and remediation of security alerts within defined SLAs, while providing guidance and support to L1 SOC analysts.
• Manage and respond to complex and high-severity security incidents, coordinating with relevant internal teams and stakeholders to ensure timely resolution and effective containment.
• Develop and implement advanced detection and analytical techniques to identify sophisticated threat actors, emerging attack patterns, and evolving tactics, techniques, and procedures (TTPs).
• Conduct proactive threat hunting activities to identify hidden threats, suspicious behavior, and potential indicators of compromise across the enterprise environment.
• Analyze and correlate large volumes of security data from SIEM, EDR, network, and other security solutions to identify novel threats and attack techniques.
• Collaborate with the Cyber Defense Center and other security teams to develop and continuously improve threat-hunting strategies, detection rules, and security analytics.
• Perform detailed root cause analysis of security incidents and communicate findings, impact, and recommendations to both technical teams and leadership.
• Develop and maintain Standard Operating Procedures (SOPs), incident documentation, knowledge articles, and comprehensive end-of-shift reports.
• Prepare, review, and validate daily, weekly, and monthly SOC reports, ensuring accuracy, completeness, and timely submission.
• Oversee daily health checks of security tools and components to ensure optimal availability and performance.
• Mentor and train junior analysts, promoting knowledge sharing and continuous improvement within the SOC team.
• Work effectively in a 24x7 SOC environment, including rotational and night shifts, and provide leadership and technical support during critical security incidents.

Qualifications:

Education:

• Bachelor's degree in information technology, Computer Science/Engineering, or equivalent.
• Desirable certifications: Security+, CEH, GCIH, GCIA, GSEC, CISSP, CISM.

Experience:

• Minimum 3+ years in SOC monitoring and incident management.
• Extensive experience in Security Operations, Incident Response, Detection Engineering, Offensive
• Proficiency with SIEM processes and products (e.g., Microsoft Sentinel SIEM, EDR, CSPM).
• Experience analyzing systems, network, and application logs for advanced attack techniques.
• Experience consuming and analyzing Cyber Threat Intelligence for actionable insights.

Technical Skills:

• Advanced deep packet and log analytics.
• Proficiency in forensic and malware analysis.
• Expertise in cyber threat and intelligence gathering and analysis.

Analytical Skills: Ability to analyze large and complex data sets to identify sophisticated threats.

Communication Skills: Effectively communicate complex findings to technical staff and leadership.

Collaboration Skills: Work effectively across a complex, geographically dispersed organization, leading cross-functional teams.

Problem-Solving Skills: Develop innovative threat detection methods and remediation plans, addressing complex security challenges.

Leadership Skills: Provide mentorship and guidance to junior analysts, fostering a collaborative and high performing team environment.