SOC L2 Analyst

Joan Technologies; Bengaluru; On-site; INR 1,200,000 - 2,200,000; Full time

Benefits offered by this job

Shift allowance

Immediate joining

Job summary

Joan Technologies Ltd. in Bengaluru is seeking an experienced SOC L2 Analyst to join our Security Operations Centre. The role focuses on monitoring, analysing, investigating and responding to security incidents with emphasis on advanced threat detection and incident response.

You will collaborate with L1 and L3 analysts, security teams and customers to ensure timely resolution and continuous improvement of SOC operations. Immediate joining is preferred and a 24x7 shift model is in place.

Qualifications

• Minimum 5 years of experience in a SOC or similar cybersecurity role.
• Strong hands-on experience with SIEM and security monitoring tools, particularly Microsoft Sentinel and/or SentinelOne.
• Proven experience in security incident analysis, investigation, triage and escalation.
• Strong understanding of threat detection, log correlation, security alert analysis and incident response procedures.
• Experience with threat intelligence platforms and SOC operations.
• Experience using incident management/ITSM tools such as Jira and ManageEngine.

Responsibilities

• Analyse security incidents escalated by L1 analysts and conduct in-depth investigations to determine nature, impact and severity.
• Use SentinelOne and Microsoft Sentinel to correlate logs, investigate alerts and identify complex threats.
• Review and fine-tune detection rules and alerting mechanisms to improve threat detection.
• Conduct threat intelligence research to identify IoCs and attack patterns.
• Provide actionable threat intel insights to strengthen detection and response capabilities.
• Lead or support incident response activities and root-cause analysis as required.
• Escalate complex incidents to L3 per procedures.
• Prepare detailed incident reports and collaborate with stakeholders to improve SOC processes.

Skills

SIEM & security monitoring

Incident analysis & investigation

Threat intelligence

Incident response

Communication & stakeholder mgmt

24x7 SOC operations

Education

CSA / GCIH / CEH or equivalent intermediate cybersecurity certs

Tools

Microsoft Sentinel (Azure Sentinel)

SentinelOne

Jira

ManageEngine ITSM

Job description

Job Title: SOC L2 Analyst
Domain Preference: Cybersecurity / Information Security / Security Operations Centre (SOC)
Working Model: On-site – 5 days a week from the office
Role Type:Permanent

Role Overview

We are looking for an experienced SOC L2 Analyst to join our Security Operations Centre (SOC) team in Bengaluru. The successful candidate will be responsible for monitoring, analysing, investigating and responding to security incidents, with a focus on advanced threat detection, incident investigation and threat intelligence.

The primary purpose of this role is to investigate security incidents escalated by L1 analysts, identify complex threats, support incident response activities and improve the organisation's security monitoring and detection capabilities.

The successful candidate will work closely with L1 and L3 SOC analysts, security teams, customers and leadership to ensure timely incident resolution, effective threat management and continuous improvement of SOC operations.

Key Responsibilities

• Analyse security incidents escalated by L1 analysts and conduct in-depth investigations to determine the nature, impact and severity of security threats.

• Use SentinelOne and Microsoft Sentinel (Azure Sentinel) to correlate security logs, investigate alerts and identify complex threats.

• Review, validate and fine-tune security use cases, detection rules and alerting mechanisms to improve threat detection accuracy.

• Conduct threat intelligence research to identify emerging threats, vulnerabilities, indicators of compromise (IoCs) and attack patterns.

• Provide actionable threat intelligence insights and recommendations to the SOC team, customers and leadership to strengthen detection and response capabilities.

• Lead or support incident response activities, forensic investigations and root-cause analysis, as required.

• Escalate unresolved or complex security incidents to L3 analysts in accordance with established escalation procedures.

• Use Jira and/or ManageEngine ITSM tools to document, track and manage security incidents through to resolution.

• Ensure adherence to the Incident Response Plan and recommend improvements to incident handling processes.

• Support, guide and mentor L1 analysts by sharing investigation techniques, security knowledge and best practices.

• Prepare detailed incident reports covering incident trends, response times, investigation findings, corrective actions and lessons learned.

• Collaborate with relevant stakeholders to improve SOC processes, operational efficiency and overall security posture.

Required Skills & Experience

• Minimum 5 years of experience working in a Security Operations Centre (SOC) or a similar cybersecurity role.

• Strong hands-on experience with SIEM and security monitoring tools, particularly Microsoft Sentinel (Azure Sentinel) and/or SentinelOne.

• Proven experience in security incident analysis, investigation, triage and escalation.

• Strong understanding of threat detection, log correlation, security alert analysis and incident response procedures.

• Experience with threat intelligence platforms, researching emerging threats and incorporating threat intelligence into SOC operations.

• Knowledge of indicators of compromise (IoCs), attack patterns, vulnerabilities and common cybersecurity threats.

• Experience reviewing and improving security use cases, detection rules and alerting mechanisms.

• Familiarity with incident response frameworks, forensic investigation techniques and root-cause analysis.

• Experience using incident management and ITSM tools such as Jira and/or ManageEngine.

• Strong analytical, troubleshooting and problem-solving skills.

• Excellent communication, documentation and stakeholder management skills.

• Ability to work effectively in a 24x7 SOC environment and support rotational shifts, including night shifts.

Desirable Skills & Experience

• Experience working in enterprise-scale SOC environments or managed security services.

• Relevant industry certifications such as Certified SOC Analyst (CSA), GIAC Certified Incident Handler (GCIH), Certified Ethical Hacker (CEH) or equivalent intermediate-level cybersecurity certifications.

• Experience with advanced threat hunting, security event correlation and detection engineering.

• Familiarity with digital forensics, malware analysis and advanced incident investigation techniques.

• Experience improving SOC operational procedures, incident response playbooks and detection capabilities.

• Knowledge of cybersecurity frameworks, industry best practices and emerging threat intelligence technologies.

Conclusion – Ideal Candidate Profile

The ideal candidate will be an experienced SOC L2 Analyst with at least 5 years of hands‑on experience in security operations, SIEM monitoring, incident investigation, threat intelligence and incident response.

The successful candidate should be proactive, analytical and detail‑oriented, with the ability to investigate complex security incidents, identify potential threats, recommend improvements to detection mechanisms and collaborate effectively with L1 and L3 analysts and other stakeholders.

Candidates with strong practical experience in Microsoft Sentinel and SentinelOne, relevant cybersecurity certifications and experience working in enterprise or managed SOC environments will be highly regarded.

Additional Requirements

• Shift requirements: Rotational shifts in a 24x7 SOC environment.

• Shift allowance: Applicable when working night shifts, subject to the organisation's policy.

• Joining availability: Immediate joiners only. Candidates must be available to onboard within 2 days of selection.

• Interview process: Resume screening by the Hiring Manager → Technical Interview → Manager Interview → HR Discussion.