Sr SOC Analyst - CyberAxis

Cyberaxislabs; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Cyberaxislabs is seeking an experienced SOC Analyst to monitor and investigate security alerts from SIEM, EDR/XDR, firewalls, email security and cloud platforms in real time.

You will lead containment, remediation and recovery for incidents, tune SIEM rules, and guide L1/L2 analysts, while documenting findings and producing clear incident reports.

Strong English communication and MITRE ATT&CK knowledge are required to collaborate with customers and internal teams in this on-site Hyderabad role.

Qualifications

• Hands-on experience in a SOC with SIEM and security monitoring.
• Experience in investigating and handling security incidents, including root cause analysis.
• Strong understanding of SIEM use cases, alert tuning, and false positive reduction.
• Ability to perform threat hunting and analyze complex security events across endpoints, networks, and cloud environments.
• Experience in developing and improving detection rules, correlation logic, and SOC playbooks.
• Knowledge of MITRE ATT&CK framework and real-world threat scenarios.
• Experience mentoring junior analysts and guiding SOC L1/L2 teams.
• Familiarity with incident response processes and ticketing systems.
• Strong written and verbal English communication.

Responsibilities

• Monitor and investigate security alerts from SIEM, EDR/XDR, firewalls, email security and cloud platforms.
• Perform advanced incident analysis, threat hunting, log correlation and root-cause investigation.
• Lead containment, remediation and recovery activities for confirmed security incidents.
• Create and tune SIEM rules, dashboards and detection use cases to improve accuracy and reduce false positives.
• Guide L1 SOC analysts, review investigations and handle escalated incidents.
• Prepare incident reports, SOC metrics, management summaries and customer updates.
• Maintain incident-response playbooks, SOPs and ensure incidents are handled within defined SLAs.

Skills

SOC experience

Incident response

SIEM

Threat hunting

Detection rules

MITRE ATT&CK

Mentoring juniors

Incident reports

English communication

Job description

Opportunity to work with real-time SIEM, XDR and SOC platforms and helping organizations secure and defend their enterprise systems.

Key Responsibilities

• Monitor and investigate security alerts from SIEM, EDR/XDR, firewalls, email security and cloud platforms.
• Perform advanced incident analysis, threat hunting, log correlation and root-cause investigation.
• Lead containment, remediation and recovery activities for confirmed security incidents.
• Create and tune SIEM rules, dashboards and detection use cases to improve accuracy and reduce false positives.
• Guide L1 SOC analysts, review investigations and handle escalated incidents.
• Prepare incident reports, SOC metrics, management summaries and customer updates.
• Maintain incident-response playbooks, SOPs and ensure incidents are handled within defined SLAs.

Required Skills

• Must have hands-on experience working in a SOC environment with strong exposure to SIEM and security monitoring platform.
• Proven experience in investigating and handling security incidents, including root cause analysis and incident response.
• Strong understanding of SIEM use cases, alert tuning, and false positive reduction.
• Ability to perform threat hunting and analyze complex security events across endpoints, networks, and cloud environments.
• Experience in developing and improving detection rules, correlation logic, and SOC playbooks.
• Good understanding of common attack techniques, MITRE ATT&CK framework, and real-world threat scenarios.
• Experience in mentoring junior analysts and guiding SOC L1/L2 teams during incident investigations.
• Familiarity with incident response processes, ticketing systems, and security operations workflows.
• Strong written and verbal communication skills in English, with ability to document incidents and present findings clearly.