SOC Level 2 Engineer – Remote Support

I A M IT Technologies LLC; Hyderabad; Remote; INR 600,000 - 1,200,000; Full time

Job summary

I A M IT Technologies LLC seeks a skilled SOC Level 2 Engineer to remotely monitor security events, investigate incidents, and support response activities. You will perform Level 2 analysis across SIEM, EDR/XDR, and network devices, identify IOCs, and coordinate with L3 teams.

The role requires 2–5 years of SOC experience and familiarity with MITRE ATT&CK. The position offers remote/24×7 coverage with a focus on protecting critical assets and improving SOC processes.

Qualifications

• 2–5 years of experience in SOC/Security Operations.
• Hands-on with SIEM, EDR/XDR, firewalls, and network security.
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, Windows and Linux.
• Knowledge of incident response, threat intelligence, and MITRE ATT&CK.
• Strong analytical and troubleshooting skills.
• Certifications such as Security+, CEH, CySA+ or SC-200 are an advantage.

Responsibilities

• Monitor and investigate security alerts and incidents.
• Perform Level 2 analysis, triage, and incident response.
• Investigate SIEM, EDR/XDR, firewall, and network security alerts.
• Perform threat analysis and identify indicators of compromise (IOCs).
• Escalate critical incidents and coordinate with L3/technical teams.
• Prepare incident reports and maintain SOC documentation.
• Support threat hunting and continuous improvement of SOC processes.
• Work in a 24×7 SOC environment as required.

Skills

SOC Operations

Incident response

SIEM

EDR/XDR

Firewall management

Network security

MITRE ATT&CK

Analytical skills

Tools

Microsoft Sentinel

CrowdStrike

Job description

We are looking for a skilled SOC Level 2 Engineer to join our cybersecurity team and provide remote security monitoring, incident investigation, and response support.

Key Responsibilities

• Monitor and investigate security alerts and incidents.
• Perform Level 2 analysis, triage, and incident response.
• Investigate SIEM, EDR/XDR, firewall, and network security alerts.
• Perform threat analysis and identify indicators of compromise (IOCs).
• Escalate critical incidents and coordinate with L3/technical teams.
• Prepare incident reports and maintain SOC documentation.
• Support threat hunting and continuous improvement of SOC processes.
• Work in a 24×7 SOC environment as required.

Requirements

• 2–5 years of experience in SOC/Security Operations.
• Hands-on experience with SIEM, EDR/XDR, firewalls, and network security.
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, Windows and Linux.
• Knowledge of incident response, threat intelligence, and MITRE ATT&CK.
• Strong analytical and troubleshooting skills.
• Relevant certifications such as Security+, CEH, CySA+, SC-200, or equivalent will be an advantage.
• Candidates with experience in Microsoft Sentinel, CrowdStrike, or similar security platforms are preferred.