Sr. SOC Analyst

Systems Plus; Mumbai; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Systems Plus is seeking a Senior SOC Analyst to monitor, detect, and respond to cybersecurity threats in a fast-paced setting. The role involves using commercial and open-source tools to investigate alerts, review logs, and execute incident responses, while mentoring junior analysts and handling complex escalations.

You will work closely with security engineering, IR, and IT teams, focusing on automation opportunities across the SOAR environment and maintaining MITRE ATT&CK-aligned detections.

Qualifications

• 5+ years in SOC monitoring or incident response.
• Understanding of ML/AI applications in security operations.
• MITRE ATT&CK-aligned detection engineering experience.
• Familiarity with NIST CSF, CIS Controls, PCI DSS, SOX, HIPAA, GDPR, or CCPA.

Responsibilities

• Serve as SME for 24x7 monitoring and response; manage escalations and on-call incidents.
• Investigate incidents across endpoints, networks, cloud, databases, and identity systems.
• Mentor junior SOC analysts; act as escalation point.
• Participate in tabletop exercises; review vulnerability assessments and pen tests.
• Create MITRE ATT&CK-aligned detections; refine playbooks and procedures.
• Evaluate logging gaps; recommend configuration changes to reduce false positives.
• Automate repetitive tasks in the SOAR environment using ML/AI.
• Report SOC state to leadership and collaborate with security engineering, IR, and IT teams.

Skills

SOC monitoring

Incident response

Python/Bash/PowerShell

KQL

Windows/macOS/Linux

SOAR/SIEM/XDR

MITRE ATT&CK

Communication

Education

Bachelor's degree in Cybersecurity/CS/Engineering

Tools

SOAR

SIEM

EDR/XDR

Vulnerability Management

Job description

Location: Pune Employment Type: full-time

Job Details

The Senior SOC Analyst is an experienced team member responsible for monitoring, detecting, and responding to cybersecurity threats in a fast-paced environment. Using commercial and open-source tools, this role investigates alerts, reviews log data, and executes response actions. As a senior member, they handle escalations, mentor junior analysts, manage complex incidents, and identify automation opportunities across the SOAR environment. This role reports to the Manager/Director of Security Operations.

ESSENTIAL JOB DUTIES

• Serve as SME for a team dedicated to 24x7x365 monitoring and response; manage escalations and on‑call incidents.
• Investigate incidents across endpoints, networks, cloud, databases, and identity systems.
• Mentor junior SOC analysts; serve as escalation point and identify team strengths and growth areas.
• Participate in tabletop exercises; review findings from vulnerability assessments and pen tests.
• Create MITRE ATT&CK-aligned detections; refine playbooks, policies, and procedures.
• Evaluate logging gaps; recommend tool configuration changes to minimize false positives.
• Automate repetitive tasks in the SOAR environment using ML/AI to drive efficiency.
• Report on SOC state to leadership; partner with security engineering, IR, and IT teams.

SKILLS & EXPERIENCE

• 5+ years in SOC monitoring, incident response, or related cybersecurity fields.
• General understanding of ML/AI applications in security operations.
• Scripting proficiency in Python, Bash, JavaScript, or PowerShell; skilled in KQL.
• Advanced proficiency with Windows, macOS, and Linux operating systems.
• Expertise in SOAR, SIEM, threat intelligence, EDR/XDR, and vulnerability management.
• Strong judgment and quick decision-making in complex, high-pressure situations.
• MITRE ATT&CK-aligned detection engineering experience.
• Exceptional written and verbal communication across all organizational levels.
• Familiarity with NIST CSF, CIS Controls, PCI DSS, SOX, HIPAA, GDPR, or CCPA.

EDUCATION & CERTIFICATIONS

• Bachelor's degree preferred in Cybersecurity, Computer Science, Engineering, or a related field.
• Preferred certifications: GCIH, SEC+, GDAT, GCED, Microsoft Certified SOC Associate, or CISSP. .