Sr. Analyst - SOC

Neurealm Company; Pune District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Neurealm Company is seeking a Sr. Analyst to join the SOC in Pune/Chennai. The role focuses on L2 monitoring, triage, investigation, and response to security alerts in a 24x7 SOC. You will analyze logs from SIEM/EDR, investigate incidents, and perform threat hunting with root-cause analysis.

You will tune detection rules, create playbooks, and coordinate with IT teams for containment and remediation, while documenting RCAs and advisories for management.

Qualifications

• Senior SOC Analyst with 2+ years in L2/L3 monitoring and incident response.
• Experience analyzing logs from SIEM, EDR/XDR, firewalls, and cloud sources.
• Ability to create and tune detection rules and runbooks.

Responsibilities

• Monitor, triage, investigate, and respond to security alerts 24x7.
• Perform root-cause analysis and determine attack scope and impact.
• Coordinate with IT, Network, Cloud, IAM for containment and remediation.
• Prepare incident reports, RCAs, and security advisories.
• Automate SOC tasks using scripting languages and contribute to dashboards.

Skills

L2 SOC Analyst

SIEM analysis

EDR/XDR

Incident response

Threat hunting

Root cause analysis

Python scripting

PowerShell

Bash scripting

Incident reporting

Networking basics

Collaboration with IT teams

Education

Security certifications (SC-200, Security+, CySA+, CEH, GCIH)

Tools

ServiceNow

ManageEngine

SIEM tools

Job description

## Sr. Analyst - SOC01-10-2026 23:17:28Job\\_3047925 - 8 years* Pune, Maharashtra, India (PUN)Location: Chennai or PuneKey Responsibilities – L2 SOC Analyst* Perform L2 monitoring, triage, investigation, and response to security alerts and incidents in a 24x7 SOC environment.* Analyze and correlate logs from SIEM, EDR/XDR, firewalls, network devices, servers, cloud, identity, and security applications.* Investigate security incidents such as malware, phishing, compromised accounts, suspicious network activity, privilege escalation, lateral movement, and data exfiltration.* Conduct root-cause analysis, identify attack techniques/TTPs, and determine the scope and impact of incidents.* Perform threat hunting and proactively identify suspicious activities, IOCs, and emerging threats.* Create, validate, and tune SIEM correlation rules, detection use cases, and alerts based on organizational requirements.* Perform false-positive analysis and detection tuning to improve alert accuracy and SOC efficiency.* Analyze threat intelligence, vulnerabilities, IOCs, and TTPs and correlate them with internal security events.* Support investigation and response to critical and high-severity incidents, escalating complex cases to L3/Incident Response teams with complete evidence and analysis.* Coordinate with Network, Server, Cloud, IT, IAM, Vulnerability Management, and other technology teams for containment and remediation.* Monitor and validate the health and availability of critical security monitoring/log sources and report gaps or ingestion issues.* Prepare and maintain incident reports, investigation timelines, RCA, security advisories, and SOC documentation.* Maintain accurate incident records and updates on ServiceNow, ManageEngine or other ITSM platforms.* Develop and maintain SOC playbooks, SOPs, knowledge articles, and investigation procedures.* Use Python, PowerShell, Bash, or other scripting languages to automate repetitive SOC activities and analysis.* Perform basic network/packet analysis and investigate suspicious network communications.* Contribute to SOC dashboards, metrics, trend analysis, and management reporting.* Share investigation findings, threat intelligence, and lessons learned with other SOC analysts and security teams.* Continuously improve SOC detection coverage, incident response processes, monitoring capabilities, and operational efficiency.Certification* Security certifications such as SC-200, Security+, CySA+, CEH, GCIH, GCIA, or equivalent are preferred.Communication & Documentation* Strong written and verbal communication skills.* Ability to prepare clear incident reports, investigation summaries, RCA documents, security advisories, and management updates.* Ability to communicate technical security findings to both technical and non-technical stakeholders.* Ability to contribute to SOC documentation, playbooks, SOPs, dashboards, and knowledge repositories.