Sr Security Analyst - L2 (SOC)

SHI; Hyderabad; On-site; INR 1,200,000 - 1,600,000; Full time

Job summary

SHI Hyderabad is hiring a Senior Security Analyst (Level 2) to address and investigate real security incidents. You will evaluate Tier 1 findings, perform in-depth investigations, and develop correlations using SIEM rules and parsers.

The role requires coordinating incident handling and documenting every step from detection to resolution. Responsibilities include communicating with stakeholders, preparing executive summaries, and continuously improving SOC processes to protect managed clients in

Qualifications

• 4+ years of experience in security operations and incident response.
• Experience coordinating Level-1 and Level-2 SOC incidents.
• Willingness to work in a 24x7 security monitoring environment.

Responsibilities

• Addresses real security incidents and evaluates Tier 1 findings.
• Conducts information security investigations from SOC monitoring sources (SIEM, tickets, email, phone).
• Develops and tunes SIEM correlation rules and parsers.
• Acts as lead coordinator for information security incidents.
• Documents incidents from detection to resolution.
• Publishes weekly and monthly SOC reports for managed clients.

Skills

Incident response

Security investigations

Threat intelligence

SIEM familiarity

Lead coordination

Communication

Tools

SIEM

Job description

Sr Security Analyst

Level : L2

Exp: 4+yrs

Location: Hyderabad.

JD:

• Tier 2 Security Analyst addresses real security incidents.
• Evaluates incidents identified by tier 1 analysts.
• Responsible for conducting information security investigations as a result of security incidents identified by the Level 1 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone)
• Uses threat intelligence such as updated rules and Indicators of Compromise (IOCs) to pinpoint affected systems and the extent of the attack.
• Analyzes running processes and configs on affected systems.
• Carries out in-depth threat intelligence analysis to find the perpetrator, the type of attack, and the data or systems impacted. Creates and implements a strategy for containment and recovery.
• Act as a point of escalation for Level-1 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques.
• Should have experience in Developing new correlation rules & Parser writing
• Experience in Log source integration
• Act as the lead coordinator to individual information security incidents.
• Document incidents from initial detection through final resolution.
• Participate in security incident management and vulnerability management processes.
• Coordinate with IT teams on escalations, tracking, performance issues, and outages.
• Communicate effectively with customers, teammates, and management.
• Prepare Monthly Executive Summary Reports for managed clients and continuously improve their content and presentation.
• Provide recommendations in tuning and optimization of security systems, SOC security process, procedures and policies.
• Define, create and maintain SIEM correlation rules, customer build documents, security process and procedures.
• Follow ITIL practices regarding incident, problem and change management.
• Staying up to date with emerging security threats including applicable regulatory security requirements.
• Maintain an inventory of the procedures used by the SOC and regularly evaluate the SOC procedures and add, remove, and update the procedures as appropriate
• Publish weekly reports to applicable teams.
• Generate monthly reports on SOC activity.
• Should be skilled on Deception Technology, EPP, EDR, IPS/IDS desirable.
• Required flexibility to work in a 24x7 environment.